6fdcb75222d37c99a2f5cbfb82336880 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6fdcb75222d37c99a2f5cbfb82336880
Size

76KB
MD5

6fdcb75222d37c99a2f5cbfb82336880
SHA1

d09efcc53eb5712e05c1b33f7bf0d3116edbe7cf
SHA256

db42e424f7d05b998b407e1609aa31ad57f3b0f599396a951ea63fe0383b0ec8
SHA512

0f60222ec1d1fd8ac4f8cff0c121bc59b51a889e1be4ab6429d2b2d51c14c57cd59f3b8b9eb89d1e9072a61c7cf4252ec80eb06bcd90cac046201e47b52f7486
SSDEEP

1536:PMp7tp3PsCQ987rKPuGtDS4OFy23idpURXETCOwpjVrs2ryrd1vUQuq6:UR/3PhS8SPuvy23iAajwHs2qo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6fdcb75222d37c99a2f5cbfb82336880

Files

6fdcb75222d37c99a2f5cbfb82336880
.exe windows:4 windows x86 arch:x86

af9c4c2fccb54b0d2ff87d4ef67cfab4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateVirtualBuffer
VirtualQuery
EraseTape
GetProfileSectionA
SetLastError
GetFirmwareEnvironmentVariableW
SetMessageWaitingIndicator
BindIoCompletionCallback
ReadConsoleInputA
GetLocaleInfoA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE