6412e8d25f1f1798a11e2bebcccef94f | Triage

Sharing

General

Target

6412e8d25f1f1798a11e2bebcccef94f
Size

76KB
MD5

6412e8d25f1f1798a11e2bebcccef94f
SHA1

b35a38b8517379d0f0784037131d2d86be6bbe89
SHA256

c2cb6f828f7cbe1a0661bf13e5e9aea086409720b36ae6c4cabbaf5688d11a1e
SHA512

de7553a856fc56626a0f7e906bc6acbf1e14cea67ddb331be3120859ef24b05b66b5ed5e509cac2bea9d147ac8ccced96818983d232965ae1bcb863b893b8f90
SSDEEP

1536:52RRRRrELuyK5X7ePEDEAtQSAOIy3dKKLYg5vPcfpapjVrs2ryrd1vUQuq6:jEeIEAt5AZy3dFPlHs2qo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6412e8d25f1f1798a11e2bebcccef94f

Files

6412e8d25f1f1798a11e2bebcccef94f
.exe windows:4 windows x86 arch:x86

4f65a7a2b111b18cb1db6988d095379e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TryEnterCriticalSection
ValidateLocale
GetTimeFormatA
GetCommTimeouts
PeekConsoleInputA
SetConsoleWindowInfo
CompareStringW
GetTapeStatus
GetConsoleCommandHistoryLengthW
RegisterWowExec
WritePrivateProfileStringW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE