6389440e5fa1b208cb1428eddf19db41 | Triage

Sharing

General

Target

6389440e5fa1b208cb1428eddf19db41
Size

12KB
MD5

6389440e5fa1b208cb1428eddf19db41
SHA1

61e7b9deae0b7ee76c69140a9647c26464ff30c7
SHA256

92b257d4d654efcea181c254e2ce4e2173528110576033e77755012769194ca7
SHA512

7e2fbfb43d535995985be89e2e40fa2bf325167deb01543ea4ec6cf4e6cfcd4568b1c90d71eab7f2467e817722b1649679b2f6dece7cef1962fb7391ee9b09d5
SSDEEP

96:c8ZBV5n2h/KzyiOpZjgObUK4piOdSLSbGRYw71yQtQKQYQ:cGBrn2h/WOrGMO0LSbA7MQjQYQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6389440e5fa1b208cb1428eddf19db41

Files

6389440e5fa1b208cb1428eddf19db41
.exe windows:4 windows x86 arch:x86

c162473f2b23a9ebcac3fd8a0fcf7b1d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDCEx

kernel32

CreateThread
ExitProcess
GetLastError
GetTickCount
Sleep
WaitForSingleObject

gdi32

EnumFontsA

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 384B - Virtual size: 320B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ