6dd9dacd6e3aa0cbace927421e9e43f3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6dd9dacd6e3aa0cbace927421e9e43f3
Size

64KB
MD5

6dd9dacd6e3aa0cbace927421e9e43f3
SHA1

85c1ec2d689c3aa4e9454744235b439e7569fdfc
SHA256

14e0bc5a1ebd95cf786e98f178b158857f509e7c3052a1d1c455acd11cf58fb4
SHA512

2241f47a3eda5d0cd45029eb02a7138a9481a42d1ae1b822ddf7f85012fd7dd5e543d6a87df954745fbaa2e5e5e83f8dc8f44b81793261c376fc67587a9e344d
SSDEEP

1536:tEZpZYUpAQvM00Dw8bEN7viC60Ip79v1t7utLC/y0GwmRJG5eN:tE1Y1QvMvUd7v00Ip7pz7ALCa09mRJIg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6dd9dacd6e3aa0cbace927421e9e43f3

Files

6dd9dacd6e3aa0cbace927421e9e43f3
.exe windows:4 windows x86 arch:x86

a56f115ee5ef2625bd949acaeec66b76

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA

Exports

Exports

_SSL_CTX_free
_SSL_CTX_new
_SSL_CTX_set_verify
_SSL_connect
_SSL_free
_SSL_library_init
_SSL_new
_SSL_pending
_SSL_read
_SSL_set_fd
_SSL_shutdown
_SSL_write
_SSLv23_client_method
_SSLv2_client_method
_SSLv3_client_method
_TLSv1_client_method

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 627B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ