6eaf346d0636f4016d6fdc76279675ae | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6eaf346d0636f4016d6fdc76279675ae
Size

38KB
MD5

6eaf346d0636f4016d6fdc76279675ae
SHA1

45d75851139737d7d49f3c6dee040aec2ad0656a
SHA256

939c6b291acc314d96304a5429628537b58af00cb33a69056696af58a61f4486
SHA512

e07ce878b0df931e4ad8708496b5e7ec4384a85c3188dae19b718189be4973caad52cf8e242899619149a6a70235dcdc117b2e9c8dc00f781f37ade3c7578b72
SSDEEP

768:cD8Mku/08vChRzSbJ/iB1ljyRFQPeB1Qi6YyJVQQeDlV8T3+cxcG4:ABkuM1hR2g18CeB1QMyJVQQeD4vxcG4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6eaf346d0636f4016d6fdc76279675ae

Files

6eaf346d0636f4016d6fdc76279675ae
.exe windows:4 windows x86 arch:x86

a49163137f7da412d513f7b8ae5fcb56

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObject
WaitForSingleObjectEx
HeapAlloc
GetProcessHeap
ExitProcess
GetProcAddress
LoadLibraryA
HeapFree

user32

GetParent
GetLastActivePopup
GetTopWindow
GetWindowTextLengthA
AnyPopup
IsIconic
WaitForInputIdle
CloseWindow
IsWindowUnicode
GetForegroundWindow
TileWindows
ShowWindowAsync
SetForegroundWindow
SetParent
wsprintfA
IsZoomed
RegisterClassA

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 718B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE