6f2511a62999d2139504f083c3e649d3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6f2511a62999d2139504f083c3e649d3
Size

108KB
MD5

6f2511a62999d2139504f083c3e649d3
SHA1

76cf227e1ddd9349d56dc7da5be61fb21a946303
SHA256

e91459838f6fe40476332a907e664de67f8058638e88848e3c643e9637096e05
SHA512

acdc892d31b0fb50b25ec2202e97a8d9464346343a773a7aa8514d9f1118221a4027389bf47f90484004eb7fc08030587e107bbe86aa3061530b6f5f7b2e9301
SSDEEP

1536:/xjKxUBfhgZSUufF5K8z39CoXwEGs5SC/z+sXAbe2FhgN3m36E4WGSAioI:JjkUhy1sNXwUS++NSSAioI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f2511a62999d2139504f083c3e649d3

Files

6f2511a62999d2139504f083c3e649d3
.exe windows:4 windows x86 arch:x86

bb1a7d08963e90848932281ea5f8fa28

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetStockObject
GetDeviceCaps
SetTextAlign
RestoreDC
GetPixel
DeleteDC
LineTo
CreateSolidBrush
SelectObject
GetTextMetricsA
CreatePalette
SetStretchBltMode
SetMapMode
DeleteObject
GetObjectA
SaveDC
CreateCompatibleDC
SetTextColor
GetClipBox
SelectPalette

kernel32

RemoveDirectoryA
GetModuleHandleA
lstrcmpA
lstrcmpiA
GetCommandLineA
GetWindowsDirectoryA
lstrlenA
CopyFileA
QueryPerformanceCounter
lstrlenW
GlobalFindAtomA
DeleteFileA
GetSystemTime
RemoveDirectoryW
FindClose
lstrcmpiW
VirtualAlloc
VirtualFree

user32

GetParent
GetDC
TranslateMessage
GetSystemMetrics
CharNextA
GetDesktopWindow

glu32

gluNurbsCallback

Sections

.text
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ