6d3451f7b8edc03c9907f8141d635fcf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6d3451f7b8edc03c9907f8141d635fcf
Size

25KB
MD5

6d3451f7b8edc03c9907f8141d635fcf
SHA1

63032425de73d61870f57c1fa57fcf9cc59a20ea
SHA256

cf2042bee1870c5d00ecd12b2346eeac18a385559e7846bf562d0bdb1da4c477
SHA512

5564ac82e9abb73933f4b262e48a4d608da6af356459088d3caa6f7c619d1bf211fbdb52d18e9890b39eb57cfcefc59def7d34d842498508e2829aa2a019360a
SSDEEP

384:EqHrOIT60PgJHWdmOvHQm70VgWA7VlIQI15wMraHRokE/EqojQH+V:EqLhTB7Om7FWA7VHIEOaLE/LzH+V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6d3451f7b8edc03c9907f8141d635fcf

Files

6d3451f7b8edc03c9907f8141d635fcf
.exe windows:1 windows x86 arch:x86

50dd56e8c6f9914775718bb75e8a69d2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA

user32

GetKeyState
SetActiveWindow
GetFocus

gdi32

EndDoc
LPtoDP
SetMapMode

Sections

.idata
Size: 512B - Virtual size: 320B

IMAGE_SCN_MEM_READ

.code
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ