f6b38b5d651b8b2770ebb9e940fb2abb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f6b38b5d651b8b2770ebb9e940fb2abb
Size

484KB
MD5

f6b38b5d651b8b2770ebb9e940fb2abb
SHA1

8a77dc96503f358bb0245c89310496364387c2cd
SHA256

da83f4471d131dbcdf86c316e1975a33831914d26508c9a826ed741063b7e3ea
SHA512

47be9bc416784fdb043c92bf80b64ebeb9e681670fc929df307b910dfb550caaaad2b8849f0946e79f2db888da7b5924348b73e76544fe4d2b005c15a449a943
SSDEEP

12288:sqh9OAhjodindKe+Y37mvg2Qak26fXXXXXXXXZ4UkS:lJZo0ndK9YaY2Qagh4Uk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f6b38b5d651b8b2770ebb9e940fb2abb

Files

f6b38b5d651b8b2770ebb9e940fb2abb
.exe windows:4 windows x86 arch:x86

25cf512ad9eefa01b1300ad11b563b23

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateWaitableTimerA
GetCurrentThread

user32

GetKBCodePage

Sections

.text
Size: 480KB - Virtual size: 484KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 161B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE