6d89f07b7a1a938dbc57c6aa75c80910 | Triage

Sharing

General

Target

6d89f07b7a1a938dbc57c6aa75c80910
Size

1.2MB
MD5

6d89f07b7a1a938dbc57c6aa75c80910
SHA1

9ce9a368d7637cf0b9fefaed3062bb741ba89585
SHA256

3a28126e14f8394fa35e32950e2c40274c4efb665e267a75ce1e16fccb3260d0
SHA512

f488542da93e9f37bc2d9304646307c17af500d541f8035da4aea926a4c78dc3c6c1d86eb1e494ed79dab18353cefc6103b043e7750966eea47c88d1b5a323df
SSDEEP

24576:48SedSQNRSOBP0ggk3KQUQ6HHGWjd6VBpj2xpaPJGN8+3DxbmzK:4Edzbgk34Q6HmWjd6VBN4paPE36K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6d89f07b7a1a938dbc57c6aa75c80910

Files

6d89f07b7a1a938dbc57c6aa75c80910
.exe windows:4 windows x86 arch:x86

af6814a8d7f091e1d89d829ba7827d7d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
VirtualProtect
GetModuleHandleA
ExitProcess
SetConsoleScreenBufferSize
GetStartupInfoA
GetModuleFileNameA

advapi32

GetTokenInformation
ReadEventLogW

Exports

Exports

Xuhrfxkuryy

Sections

.text
Size: 5KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ldata2
Size: 624B - Virtual size: 3.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.1MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enull
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ