6dc0f7133b093a52baa8a9bac9bd4290 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6dc0f7133b093a52baa8a9bac9bd4290
Size

234KB
MD5

6dc0f7133b093a52baa8a9bac9bd4290
SHA1

396e2ef39ba55752ddceea39830905d350dc0489
SHA256

48f8e220554ca276d2e3eed8f029398def3cc3c43e208c681e806a7b599af537
SHA512

c4d97684cf95cf437b366abab6836d0d1fe7d73770e808db54de2e013a379e6fef842a83d05aacd2221001cb79e3900833b829f11d1636d5d6276c2555fda6b5
SSDEEP

3072:cv8OmOazxKxLRnp2rzp5+dtlg9X8z3QO0ji0JZlxzKKzkQ33ZmIgAGkIKlr5YQx:cvftaz4NnpyDozR3yvjkG3PV6U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6dc0f7133b093a52baa8a9bac9bd4290

Files

6dc0f7133b093a52baa8a9bac9bd4290
.exe windows:4 windows x86 arch:x86

153108a8f605a02936ebd181486e7bc7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset
memcpy
_CIlog
floor
ceil
strlen
memmove

kernel32

GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
CloseHandle
InitializeCriticalSection
WaitForSingleObject
PeekNamedPipe
HeapAlloc
HeapFree
EnterCriticalSection
HeapReAlloc
LeaveCriticalSection
TlsGetValue
TlsSetValue
TlsAlloc
WaitForMultipleObjects
GetCurrentThreadId
GetCurrentProcess
GetCurrentThread
DuplicateHandle
CreateSemaphoreA
CreateThread
ReleaseSemaphore

user32

CallWindowProcA

wsock32

closesocket
WSACleanup
WSAStartup

Sections

.cod
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.d...
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ