00b6f5b1b7197cdc3c215f25e175763a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

00b6f5b1b7197cdc3c215f25e175763a
Size

11KB
MD5

00b6f5b1b7197cdc3c215f25e175763a
SHA1

c4f3bac07972b677bf54fa9c7ec9bed714c103b0
SHA256

11eea0331f30a0610600fa4bcf866b1e828f3953ec5d974c792e703e473d5c9c
SHA512

3667fb570223bb99279bd3d59862ce412f2fad79369ddd05babb72c856369cc65fa809f5e9ed1dd78191872e89aee15d2befbff06c058ac29d80de2fdce84612
SSDEEP

192:buNfC2AaknqvogkzNEL1X+FiD8GtNclUcXvxhabWSuw7Y1uBbax7aKowp1:buNfCyknAQxEL1X+EtGlUceWlL1MBKoE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00b6f5b1b7197cdc3c215f25e175763a

Files

00b6f5b1b7197cdc3c215f25e175763a
.exe windows:4 windows x86 arch:x86

5467b200020d9e403989a9a49decc2fc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

urlmon

URLDownloadToFileA

msvcrt

rand

user32

GetWindowTextA

oleaut32

SysAllocString

Sections

.text
Size: 7KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE