6704074c0b6b8caf6bc5693edbae8e68 | Triage

Sharing

General

Target

6704074c0b6b8caf6bc5693edbae8e68
Size

63KB
MD5

6704074c0b6b8caf6bc5693edbae8e68
SHA1

5d639687018a43b0c681faf14b4ae54122720942
SHA256

f4ad0e426b06d95d271416f5b77b1e5f65d7f9a9d4fbea186d92269ba9fdf66e
SHA512

c017bb4fcd4d34529e23aa308a6de9c355591e461d7a52503ee34eb323291f8f44fbd4309d94017c91e9a1daa0b3976e8ede271ae3e071564d5b7e4d180f805c
SSDEEP

1536:mhNDu+ivUbPut3svyFlBq5MhysgKO4bC77KqL5o6:4lqUzis+lA6xgIbgL5V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6704074c0b6b8caf6bc5693edbae8e68

Files

6704074c0b6b8caf6bc5693edbae8e68
.exe windows:4 windows x86 arch:x86

1ac4ca4a47ef37304638c3921d2eb166

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalFileTimeToFileTime
QueryPerformanceFrequency
SearchPathA
TlsFree
OpenProfileUserMapping
GlobalFindAtomW
DuplicateConsoleHandle
LZOpenFileW
FindNextFileA
ExpandEnvironmentStringsA
GetLongPathNameW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE