6ed1b962da83c9a0bcb98aff4ed83452 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6ed1b962da83c9a0bcb98aff4ed83452
Size

102KB
MD5

6ed1b962da83c9a0bcb98aff4ed83452
SHA1

06961af626280239d14656c6e74befdc36bc597c
SHA256

357b4b7ec83315dfa67fc15423bef12a6131e77703597763b40c33f0c0ae2be6
SHA512

a96727e65c22c8e642428913a7a61c988159f610ddd7a5122ad3959ce1c4f14d5c8aef383bb700d0b6d47f4d6d89b2f866316171d969716404d22870639f7bcd
SSDEEP

3072:O3jJloSu5znh5JYT5X6FmpKc1BunNTU4tb:qa75kX6wz0nN40

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6ed1b962da83c9a0bcb98aff4ed83452

Files

6ed1b962da83c9a0bcb98aff4ed83452
.exe windows:4 windows x86 arch:x86

6328672f467b12b62ee0534d4092a5d5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateProcessA
MultiByteToWideChar
GetModuleHandleA
GetTickCount
GetCurrentProcess
DeleteFileA
GetModuleFileNameA
GetWindowsDirectoryA
SetFilePointer
ReadFile

ole32

CoInitialize
OleSetContainedObject
OleCreate
CoUninitialize

user32

ShowWindow
CreateWindowExA
UpdateWindow
GetWindowLongA
GetMessageA
MessageBoxA
DestroyWindow
SetWindowLongA
DefWindowProcA
PostQuitMessage
DispatchMessageA

advapi32

RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegSetValueExA
RegOpenKeyExA

shell32

SHGetMalloc
SHGetSpecialFolderLocation

Sections

.text
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ