6495b7c0c8a86ad96bf667e5f693cf0a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6495b7c0c8a86ad96bf667e5f693cf0a
Size

110KB
MD5

6495b7c0c8a86ad96bf667e5f693cf0a
SHA1

9fdfd766cfb628dd25a72e52ec6edf4915cab538
SHA256

0d0258872f1a418266a939dc1d7dc926b6223ee8b400b2ce82527fe58d21281e
SHA512

74ea5d6e21f48f0d015ca10229e8a97d2a84e8004e8bea7162fe7ccb417d90e59deab379e7ceff998376ce892acdccb7cdb06138e39781847f7604dd941334bd
SSDEEP

3072:ncw9JIpFWgCcw2OPdZm+UyidxE9oVjB1jzF:RJIpFWgCP/Pb2ymxQK/F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6495b7c0c8a86ad96bf667e5f693cf0a

Files

6495b7c0c8a86ad96bf667e5f693cf0a
.exe windows:4 windows x86 arch:x86

9c8decf3582072f6edfc385a689f44f4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateDirectoryA
CreateFileA
DeleteFileA
ExitProcess
FreeLibrary
GetCommandLineA
GetFileTime
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
GetTempPathA
GetWindowsDirectoryA
LoadLibraryA
lstrcatA
lstrcmpiA
RemoveDirectoryA
SetFileTime
VirtualAlloc
VirtualFree
WriteFile

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE