6f66fa0219232703358ed101f43fe708 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6f66fa0219232703358ed101f43fe708
Size

19KB
MD5

6f66fa0219232703358ed101f43fe708
SHA1

c739bab0148c9906a2713c3673f5cc28a567928a
SHA256

e4d37ba8ab35cfa1cb2db24bceb38155c7be817b1aa4e45826f39a0de554217c
SHA512

571f4bf4baa11faa00c8cac7fdb7e19391588ef825b8875abcc9727c7b3fc91ee134227d10d9e5712bee37b6fa1ed26b8556de243b212fff646e27d84b9436f7
SSDEEP

192:r4VSbUUi2xmlamOTJQn3leS7FlxPJ8Zf2yI0f8bAFP1oyNz2zKx1fdcscqh:r4gNxHmOIhFjmZf2mCAx1nGK7fdTcqh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f66fa0219232703358ed101f43fe708

Files

6f66fa0219232703358ed101f43fe708
.exe windows:4 windows x86 arch:x86

84e03cea260b5a1c585a638de037da92

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GetExitCodeThread
GetProcAddress
GetModuleHandleA
GetCurrentProcessId
SleepEx
GetLastError
FindFirstFileA
FindClose
GetVersionExA
GetEnvironmentVariableA
Sleep
LoadLibraryA
SetLastError
GetCurrentThread
GetStartupInfoA

msvcrt

memcpy
strncpy
memset
strstr
strcmp
_snprintf
strcpy
calloc
malloc
tolower
_pctype
_local_unwind2
__mb_cur_max
strchr
atoi
free
_vsnprintf
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_except_handler3
strlen
_isctype
_stricmp

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE