6e569e4f6e55ced4f6a8060724e0d3ba | Triage

Sharing

General

Target

6e569e4f6e55ced4f6a8060724e0d3ba
Size

1.0MB
MD5

6e569e4f6e55ced4f6a8060724e0d3ba
SHA1

480040c7058680d848863abd359f5872be0f90a2
SHA256

c6ff02df3363fcf41362394c723698bcca0288a9f09ee4381e7f2f8c2e1c2873
SHA512

cd1b574da9cef6f62cfb5deafb14108f98dc369a64b5a7475d1427f2e952c26516ef42f98fcbbb02b218c3a928581baac8e3893535a46e830ed3bcacce91f786
SSDEEP

12288:4B5hFDE8YsDzz0TmldAanBwzuhw005r6jY12oKcQKMrTiaZqKD+l:wTEJDmCaEN005r6jY1LKBk+K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6e569e4f6e55ced4f6a8060724e0d3ba

Files

6e569e4f6e55ced4f6a8060724e0d3ba
.exe windows:4 windows x86 arch:x86

db1dfe05bed2c595a2cd668cb8466d62

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
CloseHandle
lstrcpyA
Sleep
GetVersion

gdi32

LineTo
GetObjectA
GetPixel
ExtTextOutA
GetDeviceCaps
BitBlt
GetTextMetricsA
DeleteObject
SelectObject
GetStockObject
CreateCompatibleDC
SetBkMode
GetTextExtentPoint32A
CreateSolidBrush
SetPixel
GetBkColor
PatBlt
GetTextColor
SetROP2
MoveToEx

Sections

.text
Size: 1024B - Virtual size: 1011B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ