6c0bd0cc64df899cb4b14f103ff99a09 | Triage

Sharing

General

Target

6c0bd0cc64df899cb4b14f103ff99a09
Size

8KB
MD5

6c0bd0cc64df899cb4b14f103ff99a09
SHA1

ef0285c4ae46cce098dce2d46869c7f1141886e2
SHA256

8f750b45ef0c008df7fed19ce673396dff26a0fb0bf3c0a5079652386867d7f9
SHA512

196f45c7302322aefb0a6624cc1ab2794bf65a7f60c828e535e0f0a51af3ab9f922d3eab9aa318bf6bd4c8d0e3d0583fce0afa75f56bbc6ef2c5a0ca1ebb8ca9
SSDEEP

192:Z1BtBOVUTkJoNtuOsphCrdZN4oFjDIanINwT:HLaekJoLCphC/N4oFjbnI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6c0bd0cc64df899cb4b14f103ff99a09

Files

6c0bd0cc64df899cb4b14f103ff99a09
.exe windows:4 windows x86 arch:x86

42168c3cc76297aa0e35a07be235d859

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_ISOLATION

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleW
VirtualAlloc
GetLastError

Exports

Exports

ewxcv
qazed
rfgni

Sections

.code
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 341B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ