6391f6c39f9d4737e9beb291169aaec0 | Triage

Sharing

General

Target

6391f6c39f9d4737e9beb291169aaec0
Size

132KB
MD5

6391f6c39f9d4737e9beb291169aaec0
SHA1

8b83a87730a29aecd0987f09870a84549244ce39
SHA256

a317cd2e91472a2ba1608d7b25b1e392e1298c55215039e7f144047400a2cb76
SHA512

fc582e1ba3d9037ee79476af6c4a8e65518a971de390c3de7791ffcebbab074a632fd7ab0f70a8e48f73aead22b0f6c2507f88d3287545c2b76f0e199c2db989
SSDEEP

3072:utFVb5p67f1QhQBL5N4BNzU7Qc6fDsn3:ob5p6Whsg5c6f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6391f6c39f9d4737e9beb291169aaec0

Files

6391f6c39f9d4737e9beb291169aaec0
.exe windows:4 windows x86 arch:x86

de9757aa353e5fcbb8fa79dfe79128de

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteTimerQueueTimer
GetPriorityClass
GetTimeFormatA
SetConsoleMode
GetDriveTypeA
CreateJobObjectA
GlobalUnlock
HeapLock
LocalFlags
VerSetConditionMask
Sleep
OpenFile
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

icode
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

idata
Size: - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

idata
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

idata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ