6379b671d812083ad6646bdec81bb95f | Triage

Sharing

General

Target

6379b671d812083ad6646bdec81bb95f
Size

63KB
MD5

6379b671d812083ad6646bdec81bb95f
SHA1

7449de18451a606680ee24b92d7f6860c3e1cf4b
SHA256

9994977e58ee635e62ed6e9ac2eea439c6ded1778c48782f31e51043b1bfe1e1
SHA512

41fdd5d752f14161e15f4cdfe1ecc7b3e5b2c6596a3010e34f60118935908b842184a1e65bb4a9c404ab76a4d9ec9430f1df99e40b32a671f90c0e5cc0da237c
SSDEEP

768:zBt3b8VD8Bc0cWtZlY9AtMlO6VBwSP7WKiRZmZoSMBLQWoowu5shCWcsonpfuOE:Fpb8CBHtZuflOmbP7tZoSeFwurnvnpC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6379b671d812083ad6646bdec81bb95f

Files

6379b671d812083ad6646bdec81bb95f
.exe windows:4 windows x86 arch:x86

ef39d474ee88b9215814d74ee695b02b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
VirtualAlloc
VirtualProtect
VirtualFree
GetProcAddress
LoadLibraryA
IsBadReadPtr
HeapFree
FreeLibrary
HeapReAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 160KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ