6577470b6a8e5f22e4025818a1c63dc2 | Triage

Sharing

General

Target

6577470b6a8e5f22e4025818a1c63dc2
Size

204KB
MD5

6577470b6a8e5f22e4025818a1c63dc2
SHA1

4aca875947464da06dd5e37773f9ba791e86226b
SHA256

6bc5ae29096c6fc96709814121702d45d9af056cc7ec4664855a207492034c8b
SHA512

dca4ccaca5f96cfb8231448c99b3dc20d637e3b40ab16bc0fd79d7ef7b97182a329a4eca316c907c3e3b581a6aa0c2500830ea3f0f0e3713f812605eac627a6e
SSDEEP

3072:BzNvwrV9W3xSsaaD+K7kaJWsT1GRxOPguUT3xyQttbuuZwvxRt+:BzNvwrqanKoadT18g+3RdQ+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6577470b6a8e5f22e4025818a1c63dc2

Files

6577470b6a8e5f22e4025818a1c63dc2
.exe windows:4 windows x86 arch:x86

46170570862aef9c75f1a1403cd14747

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
lstrlenA
GetCurrentThread
GetTempPathA
FindAtomA
GetConsoleTitleA
DeleteFileA
lstrcatA
ExitProcess
CreateProcessA
WriteFile
GetLocalTime
GetTempFileNameA
lstrcpyA
GetShortPathNameA
GetModuleFileNameA
MoveFileExA
MoveFileA
GetModuleHandleA
GetSystemDirectoryA
FreeLibrary
GetProcAddress
LoadLibraryA
CreateDirectoryA
SystemTimeToFileTime
CloseHandle
GetTickCount
SetFileTime
lstrcpynA
GetStartupInfoA

advapi32

RegSetValueExA
GetUserNameA
RegCreateKeyA
RegCloseKey

user32

GetDC
GetCursor
GetClassLongA
IsWindowVisible

shell32

SHGetSpecialFolderPathA

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
memset
??2@YAPAXI@Z
strlen
exit
_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 184KB - Virtual size: 181KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE