ff6e2239d6d9f01f70f0cb75ce50d9e0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff6e2239d6d9f01f70f0cb75ce50d9e0
Size

396KB
MD5

ff6e2239d6d9f01f70f0cb75ce50d9e0
SHA1

f4a239f288b3c6a14642007838682003f8d5d654
SHA256

8587c35f604aa7ec816fa229d69626bb2dd39dd682a66129f3e305ec0ccba38d
SHA512

b25746021be95936660d7cd53a889464957755eeff38d0f5db9a5f2d9548bb15836625dfa996be6c31e1dd60bc10ed3c0a8b3cbaec322c3a068d91829941cfd5
SSDEEP

6144:KjkbwNbd5cRYVl9RHNoKY+QRMDGYPRvcMsArIQ8ZoNT5IZxEzPRH:KwbCbncg9dNotSRvc1A5qoNF8cH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff6e2239d6d9f01f70f0cb75ce50d9e0

Files

ff6e2239d6d9f01f70f0cb75ce50d9e0
.exe windows:4 windows x86 arch:x86

680b918b0218082993965c6408cb9cc6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetWaitableTimer
ResetEvent
VirtualAlloc
GetProcAddress
VirtualFree
OpenEventA
GetModuleHandleA
CreateFileA
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
LCMapStringW
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
HeapFree
RtlUnwind
WriteFile
GetLastError
ReadFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
HeapReAlloc
LoadLibraryA
SetFilePointer
MultiByteToWideChar
LCMapStringA
CloseHandle

user32

LoadBitmapA

winmm

mixerClose
mixerOpen

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 264KB - Virtual size: 263KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 104KB - Virtual size: 470KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ