6fe427dccc004602f5e0450985b994c3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6fe427dccc004602f5e0450985b994c3
Size

99KB
MD5

6fe427dccc004602f5e0450985b994c3
SHA1

ea568cf04f5d9555a6e3963d7887d436f22a3321
SHA256

85da896f491fd268552fa6c7bcb12369b1f555bb778a31a1a727f9e40754aea0
SHA512

a56c523f40f8f7f55ecf2e0f7e4e2beb5cd35e3099d7756935496488b19c36b16f23435b5459592808ad36fa7ee93722f824627a5034c0f4abd6b767d726e218
SSDEEP

3072:ubRYINQuatckAlXpJD09nQoOGESN6QCqBDHh:rfc3l6OGIQCcDHh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6fe427dccc004602f5e0450985b994c3

Files

6fe427dccc004602f5e0450985b994c3
.exe windows:5 windows x86 arch:x86

17927166fa46cfd742cefc2021920247

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_Destroy
ImageList_GetIcon
ImageList_ReplaceIcon

gdi32

SetBrushOrgEx
ExtTextOutA
SetTextColor
CreateDIBSection
CreateDCW
ResizePalette

user32

LoadAcceleratorsA
MessageBoxA
wsprintfW
IsIconic
ShowScrollBar
GetClassInfoExW
DeleteMenu
GetParent
SetCaretBlinkTime
FindWindowW
GetFocus
TileWindows
InSendMessageEx

kernel32

LoadLibraryExA
CreateDirectoryA
IsDBCSLeadByteEx
SetLocalTime
lstrlenW
GetCommandLineA
EnterCriticalSection
GetStartupInfoW
ClearCommError
lstrcatW
GetUserDefaultUILanguage
GetUserGeoID
GetFileSize

comdlg32

GetSaveFileNameA
GetOpenFileNameA
ReplaceTextW
PageSetupDlgW

Exports

Exports

?pXrmtcfAlNipbqlXmFlnok@@YGND@Z
?aiUytrKVXial@@YGEPAM@Z
?siwdcwb@@YGGJ@Z
?gbqgyHskjUgs@@YGPAJD@Z
?ybemlbfoHpqmbI@@YGIJI@Z

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ