6e11f8a7a066f13814a42db8b668df91 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6e11f8a7a066f13814a42db8b668df91
Size

246KB
MD5

6e11f8a7a066f13814a42db8b668df91
SHA1

ad84406a8ca3dbbac9e0abf1c8573e669874cadd
SHA256

7b94a614b95d7699aa8fe90a4f119346309af51e29d637e4a54b4fd3714e7de7
SHA512

f50902b90fdaa690eb9204f13c4dd2fe690db108aebf0d9996a5b1ce918012b4c20c725aab108b4f10a0970087ba7afc3063e83843ab47b5be19d0cd39af98c4
SSDEEP

3072:alB2LUL9eEogSN+qBM2UYdbnCzqKDNvAgOClfZMXj57oJhYPm+25Plw17nXN2nu7:aIUL9eEApBTmPDrMAhi1h2nubaWQUz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6e11f8a7a066f13814a42db8b668df91

Files

6e11f8a7a066f13814a42db8b668df91
.exe windows:4 windows x86 arch:x86

2a144cf96d28e363634b0b215080cae2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetDoubleClickTime

kernel32

lstrcpyA
CloseHandle
CreateFileA
ExitProcess
FindResourceA
GetProcAddress
GetTickCount
LoadLibraryA
LoadResource
LockResource
SizeofResource
Sleep
WriteFile
lstrcatA

comctl32

GetMUILanguage

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 234KB - Virtual size: 234KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE