6d4f36f2a39edc82e65b85fa43869f76 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6d4f36f2a39edc82e65b85fa43869f76
Size

16KB
MD5

6d4f36f2a39edc82e65b85fa43869f76
SHA1

d167d2fa31903deb2f31d15a9a0d01e649f0d6c1
SHA256

ddb20279629e75c95143a4ec4a7ca46bb610a42dad0c66ddab55ac6d086be346
SHA512

79c464d1fa1138bfb61c813212cccd5b730450f905147b1602096783bcfa5db37af57e407b02dada2a799aaf26632cf610514f8aa9252269ac8fcafb21ba1e88
SSDEEP

384:mpcHoOOHu0AeKSbMwh+iiRqT+oZfrHxAglja4kgWCIG5pMHoVSIK:dIOOXK2Bh+iiRqDZTRAgta4kg/LMHosT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6d4f36f2a39edc82e65b85fa43869f76

Files

6d4f36f2a39edc82e65b85fa43869f76
.exe windows:4 windows x86 arch:x86

3d05135032f86cc84003861744e4f532

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
CloseHandle
CreateFileW
VirtualAlloc
GetProcAddress
LoadLibraryW
GetModuleHandleA
GetCurrentProcess
CreateFileMappingW
GetLastError
MapViewOfFile
UnmapViewOfFile
GetModuleFileNameW

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 560B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ