6fc86099eab53f3fa327d65f6919f017 | Triage

Sharing

General

Target

6fc86099eab53f3fa327d65f6919f017
Size

16KB
MD5

6fc86099eab53f3fa327d65f6919f017
SHA1

f7148df8b199898d2d8748812a1637daaa0992db
SHA256

d9f8c867c5613e7f6bed39a46b9829b430b84e8062f50d2d11d6f848f766e2fa
SHA512

ae2ba354a53f7c027ef0fde462aefb40b68b344f1c9d58d0c0b8dfce8e0fc52b538d57a4a03d98bef21170b5406b31d364d6426e0096fbf47189f70e4e1967a3
SSDEEP

48:aN3U9I5mNEmxwR0u3TSNG2nn3nncm0VAFP4oyl1p/:VEmNc0ujSI20VQP4oynJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6fc86099eab53f3fa327d65f6919f017

Files

6fc86099eab53f3fa327d65f6919f017
.exe windows:4 windows x86 arch:x86

cab9db65b38d83df39230958883c500e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
WriteFile
CreateFileA
WideCharToMultiByte
lstrlenW
MultiByteToWideChar
DeleteFileA
GetTempPathA

oleaut32

SysAllocStringLen
SysFreeString

urlmon

URLDownloadToFileA

msvcrt

_controlfp
_except_handler3
__set_app_type
sprintf
_exit
_XcptFilter
exit
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode

Sections

.text
Size: 4KB - Virtual size: 764B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 750B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 92B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE