6489da84ea4b0a1b15052aa8d7c14115 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6489da84ea4b0a1b15052aa8d7c14115
Size

148KB
MD5

6489da84ea4b0a1b15052aa8d7c14115
SHA1

c15ec2b54fa6a2bd00b6b2509488f924eb8affff
SHA256

2a27f3fc0f4e0f545b29386e80cd4734b20c13b987f5d6b6a9eea5c083dd1275
SHA512

3c7022d68d7c3cf471f24c29baf0eb8a9b97eeabf061155c9c08111a8de3eb5f8d7cf25943c42e0fab0a8c8b6915c339917e0b56e7978becbae27fafe034c114
SSDEEP

3072:GEhmTskeetqeubyluCvu8z9XRaqJ8d0nCgLc5/tJRzRzfphFgjqreBtcyd:GEhmTsCt3ubCuCvuWB8SClR1fpHCBCw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6489da84ea4b0a1b15052aa8d7c14115

Files

6489da84ea4b0a1b15052aa8d7c14115
.exe windows:4 windows x86 arch:x86

fefcdd163b1c7a380e21eec951f07627

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ShellExecuteA

msvcrt

_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__getmainargs
__set_app_type
_except_handler3
_controlfp
_acmdln
exit
_XcptFilter
_exit
??2@YAPAXI@Z
time
srand
rand
_snprintf
__p__fmode

kernel32

GetStartupInfoA
CreateThread
WaitForSingleObject
OutputDebugStringA
GetModuleFileNameA
CreateFileA
WriteFile
CloseHandle
GetCurrentDirectoryA
SetCurrentDirectoryA
GetModuleHandleA

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 860B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 132KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE