6682f7ae3798cc7d9be30b384c808352 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6682f7ae3798cc7d9be30b384c808352
Size

95KB
MD5

6682f7ae3798cc7d9be30b384c808352
SHA1

9e6a7268c381a1fadb01596d52ddc418cf37775c
SHA256

0ed5055fc7b655857d1ee951d7922009699eca0f77d0d72c9dc4199be0054011
SHA512

54e1f9841fdbd8bdc703b2e659f2088571987f2c59ed4943eaec928b3406a3f07d12a3eee4eba9284e28a9061f8d6d9f78c0f8b63e419f97e67e99120724f3fb
SSDEEP

1536:EXjVmG6LZ0GK7AeRySK2O4jGDpyUBJH6Lf4Bzi/ddpsU/edhZKz/U8+UQyEKCUN7:UjLnAeAn2Ow04LfCzUN5ekTEFjKH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6682f7ae3798cc7d9be30b384c808352

Files

6682f7ae3798cc7d9be30b384c808352
.exe windows:4 windows x86 arch:x86

90d9ed0e2958f7b55ae7fafdc2d993c6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SystemTimeToFileTime
GetComputerNameExA
FlushFileBuffers
GetCalendarInfoW
SetConsoleCursorInfo
DeleteFileW
GlobalDeleteAtom
NlsResetProcessLocale
OutputDebugStringW
GetVolumeNameForVolumeMountPointW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 38KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE