6e8fb9b4b9cc0db2283d18b9f4e6cd98 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6e8fb9b4b9cc0db2283d18b9f4e6cd98
Size

115KB
MD5

6e8fb9b4b9cc0db2283d18b9f4e6cd98
SHA1

1e7f966e0a0c25e6336e66959b0b2697b1319abc
SHA256

20f40ecdf623ab1203239b4b0adc0f660e3108bb2181aee17bb4d5524ba8525b
SHA512

e66fb21696f6e1458dcaf6e1e63ed9f94a09828663f3317575699d1d01b8be6c7e932820f7fbfc9f2e08554ac8cd88d2b95c3a5473ec765dc1645fbbf137b946
SSDEEP

3072:g8tq1JEs0pKn9t02Lkyg5WlPfuNCDYFjMrWCG:gt1+ESLyydFjMSv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6e8fb9b4b9cc0db2283d18b9f4e6cd98

Files

6e8fb9b4b9cc0db2283d18b9f4e6cd98
.exe windows:4 windows x86 arch:x86

e963fd77eb29dc0234a08dff51a87488

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsBadWritePtr
CallNamedPipeA
SetFileAttributesW
VirtualBufferExceptionHandler
AddConsoleAliasW
InvalidateConsoleDIBits
IsBadHugeReadPtr
AddAtomW
LoadResource
GetLocaleInfoW
FindNextVolumeMountPointW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 101KB - Virtual size: 122KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE