6f52cd6c56ec06aca465fb5912ccd70e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6f52cd6c56ec06aca465fb5912ccd70e
Size

1.4MB
MD5

6f52cd6c56ec06aca465fb5912ccd70e
SHA1

5a3513315f1cb2b285f794ecdc203f148d19f624
SHA256

875af24cf1ce36b544198465d73c0a255887ac3f105e87d9f5051987ba591cf1
SHA512

b5eb7820f3882089d2ca0e0ea0463a39b00c7cc2e42ece50b40f5cc97650faba4f3260f548c621df0cbcdfeaa9649270379c71a940b216233e395e88f39a4008
SSDEEP

12288:xRTPgrnZiJi8aMVkUet7EwBI+APutDrVkP+xnXOBI+AM0gLDESIhsf:xRTPM8zVkUetVI5ut/VkP+x6IS0CDjff

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f52cd6c56ec06aca465fb5912ccd70e

Files

6f52cd6c56ec06aca465fb5912ccd70e
.exe windows:4 windows x86 arch:x86

3c0e70bfa5f73f1f1cef484e2bcb5bf8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA

user32

MessageBoxA

Sections

.petite
Size: 44KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.petite
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.petite
Size: 7KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.petite
Size: 31KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE