6fe81e251f96f1d1cc9191bd75fb9daa | Triage

Sharing

General

Target

6fe81e251f96f1d1cc9191bd75fb9daa
Size

496KB
MD5

6fe81e251f96f1d1cc9191bd75fb9daa
SHA1

2b6660d0e4f79dcf133107f4e02dc16ae14fb3f7
SHA256

e7567d3fa91421fb85f72ba3c3936148b0256cad9c8da0de8ec9352c9b110d78
SHA512

8f3cc0892d10b8a5b7d08f345fb2d79d6774abb533772cb372283fbc9f072cbf1baa5cf48bb97dcaa10ae53027f125596e30e989e80d5acd45c2f7ef5beaeca0
SSDEEP

12288:o2P+/WaIxYgg4X0qJpnqtef/wpidMF30ZrAhj:ogtdYVgTJpp8P3irAhj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6fe81e251f96f1d1cc9191bd75fb9daa

Files

6fe81e251f96f1d1cc9191bd75fb9daa
.exe windows:4 windows x86 arch:x86

1ab2f8d3328165875c24fb73c00cbb40

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedIncrement
CreateThread
DuplicateHandle
GetVersionExA
GetCPInfo
TlsAlloc
GetStartupInfoA
SetUnhandledExceptionFilter
SetEvent
TlsGetValue
GetModuleFileNameW
SetHandleCount
WideCharToMultiByte
TerminateProcess
GetCurrentProcess
VirtualAlloc
ExitProcess
GetCommandLineA

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 456KB - Virtual size: 453KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ