6bf0970d34146cff9fb9e830e859dbff | Triage

Sharing

General

Target

6bf0970d34146cff9fb9e830e859dbff
Size

82KB
MD5

6bf0970d34146cff9fb9e830e859dbff
SHA1

15207123cabce2d4edf90e63ea4ba2920d12a0cb
SHA256

489d8e291adc2a98a38ed3dabc06b405f2a630dc22db3973bb1720b4057d4a35
SHA512

0e3696e5b85aa3373cffedcbae464d8fb864f0ff11e1ebf46bf85e3c6b62e812580057b6282617f8edc5eef9addc5aa47f1822c5b4892c5eaf744b5c21db1f0d
SSDEEP

1536:nQjEGK402ttM/69F78J+p0THelO38Gz3g+LS/Qt7rZDC8PCI:nlYJQXTHye33dO4t7rZDpPCI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6bf0970d34146cff9fb9e830e859dbff

Files

6bf0970d34146cff9fb9e830e859dbff
.dll windows:4 windows x86 arch:x86

940c3b1c0e7b84baf863e0403e379bf3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

RegisterClassW
MessageBoxIndirectW

kernel32

lstrcatW
TlsAlloc
ExitProcess
InitializeCriticalSectionAndSpinCount
InterlockedDecrement
InterlockedExchange

advapi32

RegSetValueExW
RegOpenKeyExW
RegCloseKey

comdlg32

GetOpenFileNameW
GetFileTitleW

Sections

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.dataa
Size: 25KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ