6f1c7c0cf6038fba7c266965d0f2ef8d | Triage

Sharing

General

Target

6f1c7c0cf6038fba7c266965d0f2ef8d
Size

124KB
MD5

6f1c7c0cf6038fba7c266965d0f2ef8d
SHA1

9b80c481a471b04be72dbcd36f394e7486b4107d
SHA256

73507bd2954fadaa530f50638a3881e1c1684c1a81b3d7ba1678fb2089450e23
SHA512

94205d8af6dc9db556259a78efe51566d3e5383c5e9521aec3cdf97da06da4e3b93042edbb77bfca444f0ea9d3a7e03ddd94d89f9037a9079921f628d4313aee
SSDEEP

3072:WnLXKRWSW3Tdv8xfaXOGd3XLsykuvut/34a8:WOc9hv+CXtrsykuW3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f1c7c0cf6038fba7c266965d0f2ef8d

Files

6f1c7c0cf6038fba7c266965d0f2ef8d
.exe windows:4 windows x86 arch:x86

cf3c39d32d1d5b093410134aed09d04e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GetComputerNameA
lstrcmpiW
GetModuleHandleA
FindAtomW
LocalFree
ReleaseMutex
LoadLibraryW
ResetEvent
ResumeThread
GetCommandLineW
CreateThread
GetSystemTime
GetTickCount
SetEvent
GetDiskFreeSpaceW
GetFileAttributesW
CreateFileA
HeapCreate
SetLastError

user32

FillRect
CloseWindow
GetClipCursor
DispatchMessageA
GetComboBoxInfo
CallWindowProcA
DrawStateA
GetClassInfoA
GetKeyState
SetFocus
GetDlgItem
DestroyCaret
CreateWindowExA
MessageBoxA

cryptdlg

DecodeRecipientID
CertTrustInit
CertConfigureTrustA
CertTrustCertPolicy
CertTrustFinalPolicy

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 111KB - Virtual size: 207KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE