6e9ec63f1efedbfb4cc498dcdf597f84 | Triage

Sharing

General

Target

6e9ec63f1efedbfb4cc498dcdf597f84
Size

903KB
MD5

6e9ec63f1efedbfb4cc498dcdf597f84
SHA1

54a0bfff017cff4fd18fa57e9aa7dae22d717678
SHA256

85eeb677fad24ff7ab2299f8da3bada6c0817372b408788ba6aa0f66a2d951d6
SHA512

88ae2f7859013107d8f26e497b4444efacc0aba72cc9dd7220f600b77e0693097c8d2d436a5f122127289cb735354c07f87d1877666a46242f5c5e9045ca26e9
SSDEEP

24576:0uvnmoFXimS95R+IZyXECM8duDhsLDo5xZ0Cb:dvnmySmMR+fXNd+V5xj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6e9ec63f1efedbfb4cc498dcdf597f84

Files

6e9ec63f1efedbfb4cc498dcdf597f84
.exe windows:4 windows x86 arch:x86

678986d7fe8eb1ebce8a0b924f59474d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTempPathA
VirtualFree
lstrcpyA
ExitProcess
DeleteFileA
FreeLibrary
GetProcAddress
LoadLibraryA
CloseHandle
WriteFile
lstrlenA
VirtualAlloc
ReadFile
CreateFileA
GetModuleFileNameA
GetLastError
CreateMutexA

user32

SetCursor
LoadCursorA
wsprintfA
MessageBoxA

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 574B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 906B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ