6891f70812f60a77ee4d5060bb6500a8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6891f70812f60a77ee4d5060bb6500a8
Size

64KB
MD5

6891f70812f60a77ee4d5060bb6500a8
SHA1

14b9fb22d6bee3bdaef7b9a94fcf3f435e38ff3b
SHA256

d47aad5b2f87a3b93a5b83ef26e19d976ec3d09981d4305b2127f3dc88dea9e3
SHA512

4165ce2d4e29f3cd07cebef3ca506f6d07f4a254ad70daee1bdda5014bb88f245e021ed47237907201af5fce64c5bd0718d9e1daad11a0b49f30cf78049d6d35
SSDEEP

768:gQSanozu2pxZCuVjznRNBLLngcxmnZ4F4:g1Ha41xTRNBYSgZ4e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6891f70812f60a77ee4d5060bb6500a8

Files

6891f70812f60a77ee4d5060bb6500a8
.exe windows:5 windows x86 arch:x86

5b59867f1c94425f679a04e0c129f09b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetCommandLineW
GetStartupInfoA

user32

LoadIconA
RegisterClassExA
CreateWindowExA
DialogBoxParamA
GetMessageA
LoadCursorA

gdi32

CombineRgn
ChoosePixelFormat
SetWindowOrgEx
EnumEnhMetaFile

shell32

SHGetPathFromIDListW
SHChangeNotify

shlwapi

StrChrIA

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ