6ee983a652409756274e86a057060aca | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6ee983a652409756274e86a057060aca
Size

809KB
MD5

6ee983a652409756274e86a057060aca
SHA1

8226da55856491c5beeadbf73345492ff95a015f
SHA256

51b0ad8efa0b2ddc3f55506c421abc34ba8ad808b9a2336ca67029447d3ceb63
SHA512

95d5435ffaf924653282d364a35876e7d6e449fb8bd9c357d6082af8b200fbe84bc152177a2e7b9e240edaee1161cffbe54aaa7898f83727a9281f6bc48c05a3
SSDEEP

24576:YE1P4EryN4v5HlFZy4gXX1wHnXxx8i97qs:B1P4EryORHlFZy4a1sX17X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6ee983a652409756274e86a057060aca

Files

6ee983a652409756274e86a057060aca
.exe windows:4 windows x86 arch:x86

6d1683e1d0b452fbbc5061ceaf94bbbb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetLastError
GlobalFree
VirtualAlloc
GetLocalTime
MapViewOfFile
GetLastError
ExitProcess
FindAtomA
CloseHandle
GetStdHandle
lstrlenW
GetFileAttributesA
CreateFileMappingW
GetComputerNameA
GetModuleHandleW
FindClose
GetPrivateProfileIntA
GetTickCount
TlsAlloc
TlsGetValue

user32

GetMenu
CloseWindow
DispatchMessageA
CallWindowProcA
GetClientRect
GetClassInfoA
FillRect
GetDlgItem
GetCaretPos
DrawStateA
DestroyCaret
CreateWindowExA
EndDialog

clbcatq

SetupOpen
CheckMemoryGates
ComPlusMigrate
DllGetClassObject
SetSetupSave

ir50_32

DllGetClassObject

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 800KB - Virtual size: 799KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ