6493f7e45ae7aebf30ca5a0c45baa13f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6493f7e45ae7aebf30ca5a0c45baa13f
Size

5.4MB
MD5

6493f7e45ae7aebf30ca5a0c45baa13f
SHA1

83fff99724b3ae0430b80f49cd0780ed52cfcced
SHA256

fad03394da0971d9ba6d1b2a89a8c7fa0cd3313d0fb0b0330a85e4944b456a40
SHA512

d3f9231155d21943e7e133f4b956d229773f7742ae61ddc8cdbc7ff7af44ff94d858b27b8c56fed3008dda095497049449f03785152a3daa6a846d0ef4d4c79d
SSDEEP

49152:Ms91Vknz4u8LwiTI2dbc9LL9MRLlCaPoWJpwXicjPVxO7sWejT+Q4QbHJC+Qn/J4:MUYLkxlwyxGbOyVPKAd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6493f7e45ae7aebf30ca5a0c45baa13f

Files

6493f7e45ae7aebf30ca5a0c45baa13f
.exe .pdf windows:4 windows x86 arch:x86 polyglot

65b6862e9898b195f4ef7a1685fd82dd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

msvcrt

memset

comctl32

InitCommonControls

user32

MessageBoxA

shell32

ShellExecuteExA

ole32

CoInitialize

Sections

.
Size: 7KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: 1024B - Virtual size: 700B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE