6c0889b1798a9191dfb69c0693a972fc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6c0889b1798a9191dfb69c0693a972fc
Size

83KB
MD5

6c0889b1798a9191dfb69c0693a972fc
SHA1

2ec4074635162ca0b903ac98493a55e792fe9b29
SHA256

77ec1ac659c2e961bbac83e2cb8424c2ae393a8085e81d113335d3515b47910e
SHA512

35c443f7b954a99584e1f27851e4edabf31fdfb94885925c33fee6de7528fbec1d98047a1ec397f819d8ca4b70cd39fc363c05ec373086a981e166cbf8b2f07a
SSDEEP

1536:Gss+HSiKnICDIejTeEHWjptfiOP26RVjNLK7TrQ6rGLc7fDf:5HSXDIe2EHwP3RuDELcjr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6c0889b1798a9191dfb69c0693a972fc

Files

6c0889b1798a9191dfb69c0693a972fc
.dll windows:4 windows x86 arch:x86

a789e7f37c314351eb5169a70a6bba21

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

IsCharUpperA
EnableWindow
CreateMDIWindowA
CreateIconFromResource

kernel32

TlsAlloc
lstrcmpiA
VirtualAlloc
UnmapViewOfFile
TlsSetValue
CloseHandle
EnumResourceLanguagesW
EnumResourceTypesA
FreeResource
GetFileSize
GetLocalTime
LeaveCriticalSection
LoadResource
OpenFileMappingA
TlsGetValue

oleaut32

SafeArrayCreate
SetErrorInfo
SysReAllocString
SafeArrayAllocData
OleLoadPicture
RevokeActiveObject
SafeArrayAccessData

Sections

.text
Size: 16KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 63KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ