6d84eee1afa0ebd1813324986fc82e4f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6d84eee1afa0ebd1813324986fc82e4f
Size

76KB
MD5

6d84eee1afa0ebd1813324986fc82e4f
SHA1

d3ca0bf6f34cd5a2c7559d379c288d129ad04f96
SHA256

50f93acb6c39ea8c29aea1d6712575d90e586f1203adb2ed936c4523f0d88f0d
SHA512

f03ffbf1c17183891d0fab630b97eaef2e51a111898f5b80d4bf3750d502c559bd70f8adae01281c3a3de271be56961fc3c109e12c6a6ec893c1fee594ba2084
SSDEEP

1536:adddddnXpcZ3C22SYh1KO6JF7s7TxycoKCIzTec3UnOpjVrs2ryrd1vUQuq6:WXKnYKg74cjyBOHs2qo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6d84eee1afa0ebd1813324986fc82e4f

Files

6d84eee1afa0ebd1813324986fc82e4f
.exe windows:4 windows x86 arch:x86

0e6990095761cd939c08da5f7416eb02

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FileTimeToSystemTime
PeekConsoleInputA
SetConsoleCursorMode
SetThreadExecutionState
GetConsoleCommandHistoryLengthA
GetVolumePathNameA
GetModuleHandleA
ConvertDefaultLocale
GetLogicalDrives
BaseFlushAppcompatCache

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE