6ed999782970c959f8af6a7b1111fda3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6ed999782970c959f8af6a7b1111fda3
Size

210KB
MD5

6ed999782970c959f8af6a7b1111fda3
SHA1

8df11d203bbae3eaf5d36bbeed92b5092ec6a427
SHA256

e5fdc508881f3bf6f4f6a5d9406ec289fbf18adceeb68375d0e68d3163c3f10e
SHA512

9673a0a51309790967204d458b3477c0097d931498774ac4d44ad055882b3f4cc2a383d4094c3021259286ad3af1fde9860c791bc50a2071dc5e11b98758d939
SSDEEP

6144:G4wJDvFeKBw8v92A7BB8TX2oo0O/UMHkF/ehqm:C1Bv/sTgMYkMhqm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6ed999782970c959f8af6a7b1111fda3

Files

6ed999782970c959f8af6a7b1111fda3
.exe windows:4 windows x86 arch:x86

81638d02019c0bfcaaf23a9c69f2f12c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileMappingA
WaitForSingleObject
CreateProcessA
GetCommandLineA
CloseHandle
UnmapViewOfFile
WriteFile
MapViewOfFile
DeleteFileA
GetTempFileNameA
GetTempPathA
CreateFileA
GetShortPathNameA
GetModuleFileNameA

user32

wsprintfA

Sections

.text
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 533B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23.3MB - Virtual size: 23.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ