6eb3815485c9af926ed7009ca6c9a597 | Triage

Sharing

General

Target

6eb3815485c9af926ed7009ca6c9a597
Size

55KB
MD5

6eb3815485c9af926ed7009ca6c9a597
SHA1

9c0d9aebd422cf140668fb7c4a17fafeaea3c60d
SHA256

48a05d104429b4f3ef794bc472f5af9d7cc4b414430efa1a6c403724ec700fd9
SHA512

c916a6584af5e021686e5490939f752505eb913beee11e441140e46b161391f595248c226ece7ee76960cd694eac9b973fa200bd85708140313698b5b55c5e4b
SSDEEP

768:Z3fPSrKcTw+lqvdu/c+7BLbC4kzSk+WdXpfmjxrvHREtvK2MMLpq:Zv2/wZvdGc+tPC4kzx+CqxDHIq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6eb3815485c9af926ed7009ca6c9a597

Files

6eb3815485c9af926ed7009ca6c9a597
.exe windows:5 windows x86 arch:x86

9b2471e86bd8d2c58452a97f9e30e58b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
LoadLibraryA
HeapAlloc
VirtualAlloc

user32

EnableMenuItem
GetMenuState

advapi32

RegOpenKeyA

Sections

.text
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 188B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.SECT1
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.SECT2
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.SECT4
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.SECT3
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 432B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ