6bc7f3d6637930d39624be753137e6c8 | Triage

Sharing

General

Target

6bc7f3d6637930d39624be753137e6c8
Size

59KB
MD5

6bc7f3d6637930d39624be753137e6c8
SHA1

9dc6913ef59250bff1a5a10f2e27f68465c48aa0
SHA256

5c054e5a82307ae6f38c45657d92619650dc3e654600f3458e6cff3a0cba33ff
SHA512

7a727771a380a4c82c17914c7c2aa25d004d40383eb6b11221caabdea02d1aa7f894bd36070a104f19b6c8366de2ab0f0ccddd7602551a5048377193a9d185e9
SSDEEP

1536:Wwoq+LsVXPTU5OaYWqNWm9CI4rG7PqbOZQpBeb8i5NiT7S:ZN+oVX7U5ZY/NXY3G7vZU5iz2W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6bc7f3d6637930d39624be753137e6c8

Files

6bc7f3d6637930d39624be753137e6c8
.dll windows:4 windows x86 arch:x86

3f6372546361ed1ca3457e353ab257a7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

msvcrt

_stricmp

user32

GetWindow

gdi32

DeleteDC

Exports

Exports

CancelDll
LoadDll

Sections

.text
Size: 13KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE