6f05ae0ec0bbffa02218ffed702c13d8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6f05ae0ec0bbffa02218ffed702c13d8
Size

8KB
MD5

6f05ae0ec0bbffa02218ffed702c13d8
SHA1

1c2aa13a55cf6cada2493fa403b53dfda82d9eb5
SHA256

21e56cbd9b7cde6bc3db4a20c20f95a0b1c0bc516b50ef961d8a3397fcc9030f
SHA512

25228e7f34b1456d5876f4271335f39b126c8f91371c49459198e5f6192d58fc1e655790432144ae6d3472d4768977d9a903538457052178194618521b8c093c
SSDEEP

192:rzhUrp+WF3JQ0cfxRG96F4zDkUpdQOpq:rEp+W1JQhvk9pq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f05ae0ec0bbffa02218ffed702c13d8

Files

6f05ae0ec0bbffa02218ffed702c13d8
.exe windows:5 windows x86 arch:x86

48f23e2a844098b39c52f16662337803

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
LoadLibraryW
SleepEx

Sections

.text
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE