6fc9bf7572b5d485fde038d764cbf093 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6fc9bf7572b5d485fde038d764cbf093
Size

12KB
MD5

6fc9bf7572b5d485fde038d764cbf093
SHA1

f0579192b7421b154ba07c36a6885dcf48237ecf
SHA256

14feee62556034572229f7c9d0881dbcb8df8c5a2bd2a0c934ebc34f408b8e44
SHA512

ef3e72fab402d3aed4375dbd36e425cef7dd97bfba9fa13e5d122ed7137403c1ab3145289cb0c969fae6fe36f7f137ef705196a2b212530ace32e11f2806ac28
SSDEEP

384:a/QON+YhhdQew20915GMwHidZMHBY6U3:pcxP+20lf1dZMh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6fc9bf7572b5d485fde038d764cbf093

Files

6fc9bf7572b5d485fde038d764cbf093
.exe windows:4 windows x86 arch:x86

1f96bd6ac14598b8b2f6aae7b51ae80d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetMessageA
RegisterClassExA
LoadCursorA
PostQuitMessage
LoadIconA
UpdateWindow
ShowWindow
EndPaint
DispatchMessageA
DefWindowProcA
CreateWindowExA
TranslateMessage
BeginPaint

kernel32

ExitProcess
GetModuleHandleA
GetCommandLineA

gdi32

SetTextColor
SetBkColor
SelectObject
CreateFontA
TextOutA

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 642B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 440B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ