6fefb9cc88f6831c15d7f25a970a48eb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6fefb9cc88f6831c15d7f25a970a48eb
Size

25KB
MD5

6fefb9cc88f6831c15d7f25a970a48eb
SHA1

ef5372644532a7c2cbf8b8ae0ac7dd25c916389b
SHA256

57480d02871d0b121793f366d33aa3cbf68e32d5c7a053988ae31a47359866ab
SHA512

4d2cb3e7e20ffebd110db072d1c2c895132be471777ef653ea32d4df240012cf65f48844b5d91ff8d056fb6e6551282c1b7744c1778359a5fdcf3ffa3b1c8061
SSDEEP

768:v9fdhV1DliedI0W1SZgM7e0Vtl3OjGTtVOVHeJ:P31DlhXDj3AG/Mq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6fefb9cc88f6831c15d7f25a970a48eb

Files

6fefb9cc88f6831c15d7f25a970a48eb
.exe windows:4 windows x86 arch:x86

572ac795bdddd1d6e220dfb63be25904

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
ExitThread
FindResourceA
LoadResource
SetUnhandledExceptionFilter
Sleep
VirtualAlloc

user32

DispatchMessageA
GetMessageA
KillTimer
SetTimer
TranslateMessage

Sections

.text
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 390B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

sopvjvt
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE