2c6fcbb4f27d3a43739581b03686de68 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c6fcbb4f27d3a43739581b03686de68
Size

257KB
MD5

2c6fcbb4f27d3a43739581b03686de68
SHA1

d709caf1fdc6a6654ae3bda610fddc82421d8089
SHA256

f00b8bd3e66a1dfe1d33c5f7e5a0e0190f643046446cc89ebf3b6ed17ade5922
SHA512

9cfd3763a266acd19c3455017b7a49ba5caa7f119da834311d88fa5edd51dd12de4f1fc6c09e78df1e07007a485ead4b550f8db3fbbb825285e297c7b821d191
SSDEEP

6144:BuBj+BH2cOPJagypC6KlvkQ2i8uOdjNCpCAAQ6WnnQepk7Wf96du:BuBj+BHBgypCRv6h7OCAPnQepk7WV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c6fcbb4f27d3a43739581b03686de68

Files

2c6fcbb4f27d3a43739581b03686de68
.exe windows:4 windows x86 arch:x86

d04df272795e3e43cfc44841ce675bcb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
CloseHandle
Sleep
CreateFileA
GetTickCount
ReadFile
SetFilePointer
DeviceIoControl
WriteFile
VirtualFree
VirtualAlloc
WinExec
WaitForSingleObject
CreateEventA
GetModuleFileNameA
MoveFileExA
DeleteFileA
GetFileAttributesA
FindClose
FindNextFileA
FindFirstFileA
ExpandEnvironmentStringsA
lstrlenA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
SetUnhandledExceptionFilter

user32

ExitWindowsEx
wsprintfA

ntdll

memcpy
memset

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 251KB - Virtual size: 251KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE