6ff690145bcf9cfd927fc85ac4490e8e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6ff690145bcf9cfd927fc85ac4490e8e
Size

33KB
MD5

6ff690145bcf9cfd927fc85ac4490e8e
SHA1

8745eb0046bc798663a27b40ef0693b8d8e40673
SHA256

1d1bbb06fca5684e12ef8107b08131446767f00b28947b9eb00abcdb043242d7
SHA512

10195314168cadd82447ef19c0020126326f03fee34ff8b31724629e615d00ebee0d4ffbaa233644f35c6382827950cf9b22fabcbeda845fee48cfae117fa093
SSDEEP

768:DHNnAeRzd/S0dk3qwYCJGyjfQYoqgVEK+W4AdSdVurASydn:DtnAeh1DdkaPIjfnKEK+5bw8Sydn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6ff690145bcf9cfd927fc85ac4490e8e

Files

6ff690145bcf9cfd927fc85ac4490e8e
.exe windows:4 windows x86 arch:x86

ee2bf920917f70362b3e8f39d6bc150a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
LoadLibraryA
VirtualFree
GetProcAddress

user32

BeginPaint
GetDesktopWindow

gdi32

GetPixel

Sections

.text
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

dfd
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ