6f7af88006da23fa82a9b9c205a7bd92 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6f7af88006da23fa82a9b9c205a7bd92
Size

96KB
MD5

6f7af88006da23fa82a9b9c205a7bd92
SHA1

8b93987813520a7b535f016516a7e5939b49bcac
SHA256

e44fdd152d202c6e82216707cd8ff474a6905982638127724532c2de907db2e6
SHA512

35d7784770da1958ef7480e3a91ea4107d02f0e74afeae5e385609b68fca3cad7c84ab2f0036772d39fee668ac70398c0299ef6cecad1275754d2b86c0882f6d
SSDEEP

1536:gxMa0wnfeyaAp+ycd+LzQ5hYzza99Af97Hkq80PnmPPuF8:E2yaApPL++vWOf1kq80PmXuG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f7af88006da23fa82a9b9c205a7bd92

Files

6f7af88006da23fa82a9b9c205a7bd92
.exe windows:4 windows x86 arch:x86

6cb0f215e0d9138ff15ee7dd8717cb3b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
DeleteFileW
DeviceIoControl
ExitProcess
FindFirstVolumeMountPointW
GetACP
GetCommandLineA
GetModuleHandleA
GetStartupInfoA
GetVersionExA
HeapAlloc
HeapCreate
IsDebuggerPresent
LoadModule
SetComputerNameExW
SetDefaultCommConfigA
SetLocalTime
SetTapeParameters
lstrlenA

user32

LoadMenuA
EndDeferWindowPos

comctl32

ImageList_DragEnter
DrawStatusTextA

ole32

CoCreateInstance
CreateAntiMoniker

dbghelp

SymLoadModule64
SymSetContext
FindDebugInfoFile
SymEnumerateSymbolsW

Sections

.text
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ