6e918cd920842b17280e5427432998a5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6e918cd920842b17280e5427432998a5
Size

199KB
MD5

6e918cd920842b17280e5427432998a5
SHA1

dbaa5c70ac40f8853bbb809ddfb814b8f8dfd8eb
SHA256

19d16b07510c1b417bdd02f237d7f334631765a57ce48b9839dc361f3f74f4b4
SHA512

f454bd6e65caf4024e5dadad4395fc683af58b904167a2b2c9e453f6752e821cfb0958b4fa11ed795b08cb9c6cf72de2c4632dbbfa96e050982618c41748e9c8
SSDEEP

3072:Ik+Hn2oM3TUULfoAGrLGBgNGGoJKG7ERRbuemXhJGTr5cxXgj2:UnhM3BoHpoGoJKzRg1EcxQK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6e918cd920842b17280e5427432998a5

Files

6e918cd920842b17280e5427432998a5
.exe windows:5 windows x86 arch:x86

80045320a22dd5f1f48796682d7e52ff

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
lstrlenA
HeapCreate
GetFileAttributesA
FindVolumeClose
CreateDirectoryA
GetProcessHeap
IsBadReadPtr
GetModuleFileNameA
FindVolumeClose
VirtualQuery
GetFileType
CreateSemaphoreA
GetDriveTypeA
WriteFile
ExitThread
GetCurrentDirectoryW
HeapFree
WaitForMultipleObjects
GetFileTime
GetCommandLineA
FindClose
GetModuleHandleA
CancelIo
LocalSize

uxtheme

GetWindowTheme
GetThemeTextExtent
IsThemeActive
CloseThemeData
GetThemeColor
GetThemeBool
GetThemeEnumValue
GetThemeTextMetrics
DrawThemeBackground
OpenThemeData
DrawThemeEdge
CloseThemeData
SetWindowTheme

fmifs

Extend
Extend
Extend
Extend

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 191KB - Virtual size: 191KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE