6ff1b8474ece8833a86b42e523a052c4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6ff1b8474ece8833a86b42e523a052c4
Size

65KB
MD5

6ff1b8474ece8833a86b42e523a052c4
SHA1

29f59abd8874636991a21eb1420bc159d849f1b0
SHA256

b05dc555c9b2090b0608f01b791edac8e597b8a906c752a2ba83d1842094eb93
SHA512

3435a24fe8bc21adbc90430298c4d34d6b38c280a499b18c4f15acbdbd6245eae3f531a05880b49ef057af42d9c6152f7cef610b387b0d64a20341596d6b2dc9
SSDEEP

1536:ysVnRx8IAqN9pZBwep9U1wo+XH/V6f+OuS39Me2t:XIIP97WepYGq+OJtHC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6ff1b8474ece8833a86b42e523a052c4

Files

6ff1b8474ece8833a86b42e523a052c4
.dll windows:4 windows x86 arch:x86

892fe729566f2643a9fc261d67991a7b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

BeginUpdateResourceA
CopyFileA
DeleteFileA
EndUpdateResourceA
FileTimeToSystemTime
GetCurrentThread
GetEnvironmentStringsW
GetTimeFormatA
GetTimeZoneInformation
GlobalFindAtomA
HeapAlloc
HeapCreate
InterlockedExchange
IsBadWritePtr
LCMapStringW
LoadLibraryA
LocalAlloc
ReadFile
TlsSetValue
WriteFile
lstrcmpiA

user32

AdjustWindowRectEx
EndDialog
EqualRect
GetClassInfoA
GetClientRect
GetFocus
GetMessageA
GetSystemMetrics
LoadCursorA
LoadIconA
ScreenToClient
SetRect
UnhookWindowsHookEx
ValidateRect

Sections

CODE
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ