6f05803da10720180beb9ef2dcd399bf | Triage

Sharing

General

Target

6f05803da10720180beb9ef2dcd399bf
Size

484KB
MD5

6f05803da10720180beb9ef2dcd399bf
SHA1

71e81b8e18505c93bc357a8898bf59781d63e604
SHA256

c0244afed3690a87a66c05bc6d01d332046a10967892bac2fdac7fa368fa7be1
SHA512

cf791d76bd62f2faf506a2ef3c9e5eee99e4871fca1ec0d742a1ef9724aaab0b1974041451a9407d60cf34f8c76ddb74a0593d008978f7b4c7501c7718226d45
SSDEEP

12288:CG6AEN4DzPEo3h5SWB0nD42SZPMJtSkpr3xZfc:CzN6nY6thktSghZfc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f05803da10720180beb9ef2dcd399bf

Files

6f05803da10720180beb9ef2dcd399bf
.exe windows:4 windows x86 arch:x86

cc1fc682eb633133a2cae73953fdaf09

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ExtractAssociatedIconExW

advapi32

GetMultipleTrusteeOperationA

ntdll

NtSetDefaultLocale

kernel32

GetCommandLineA
GetSystemDefaultUILanguage
GetProcessHeap

Sections

.text
Size: 479KB - Virtual size: 480KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 327B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE