6671dc4221f8293abd3bf7acdad5d4e2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6671dc4221f8293abd3bf7acdad5d4e2
Size

54KB
MD5

6671dc4221f8293abd3bf7acdad5d4e2
SHA1

9ab0ddbae762c1fe0ebf575827205df78de7ffd4
SHA256

a29e20f93c588664922d1c26314270aeef8e9f999449bf67fa77ef79154dbd4c
SHA512

4c17d5aaf242c4888ced7ce97fbfbb678be91a08b85d742ea34fad7d3c6e48cc711221149f8faed6026183503c649104cca9a5cee0e2be608b83136c2b1ae5a4
SSDEEP

768:0MvFIYm0on6HGavZRTQffoaFNHio0QpEGxi2vM+Fb2xQWBkmdfNhan5F0eYhxA9a:3cV6HGavEgadg+FOnB51ha5FSkNDu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6671dc4221f8293abd3bf7acdad5d4e2

Files

6671dc4221f8293abd3bf7acdad5d4e2
.exe windows:6 windows x86 arch:x86

c6bb0de3943eb1bd41df2be358de09c0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
GetTickCount
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetProcessHeap

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ