6ffcc0fbff7432e32a7fdfd4d9cd8264 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6ffcc0fbff7432e32a7fdfd4d9cd8264
Size

39KB
MD5

6ffcc0fbff7432e32a7fdfd4d9cd8264
SHA1

9352f939fb87983217ce7547c72c53b9983e491f
SHA256

82aebe5982d60b9d3674d6188f7a67004912881d87a89f345348b741e1bc41b4
SHA512

41925690072800ad42a1208b5c05be38c94c3dee1a3055d86cd27c74d4d37cc4f197becaa9a382f59b08bdff5fd241dacc01ffa86acb565c0c656a4b3d267eb7
SSDEEP

768:Nh8rKI6TpyR3Fk3zh25ZrsA7vWMoCydKkl8Tg:H8uI6TkhO3I5ZNWTckl88

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6ffcc0fbff7432e32a7fdfd4d9cd8264

Files

6ffcc0fbff7432e32a7fdfd4d9cd8264
.exe windows:4 windows x86 arch:x86

19f25dda111a710fd9da7b372afa9f4d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnterCriticalSection
GetDateFormatA
GetStartupInfoA
GetVersion
GetVersionExA
LeaveCriticalSection
LocalAlloc
OpenFile
Sleep
VirtualAlloc
lstrcpynA

msvcrt

_exit
_wcsicmp
wcscat
_XcptFilter

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ