a6c41f368f42a7c57c307a48ce2440a60a744226b6414fadb6517a80a5d160a2[.]sample | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a6c41f368f42a7c57c307a48ce2440a60a744226b6414fadb6517a80a5d160a2.sample
Size

5KB
MD5

ab65af4349e7c5b0872c8b808d036980
SHA1

414b2a2748b7ea6176c1d2453f89fdc8a2d349d0
SHA256

a6c41f368f42a7c57c307a48ce2440a60a744226b6414fadb6517a80a5d160a2
SHA512

2c61c56e8c299677bad4ce223e3187200c341aa4dd4503fac1217aa8e15687af03544a6d160bb2b1b131a56ea9df2967e00359aa622f12d1b82605c40cca6679
SSDEEP

96:5yCx9DNAHK/YTY2m7hY2mMY27a0htV+MDsx:5yCxf/YIa0hb+M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a6c41f368f42a7c57c307a48ce2440a60a744226b6414fadb6517a80a5d160a2.sample

Files

a6c41f368f42a7c57c307a48ce2440a60a744226b6414fadb6517a80a5d160a2.sample
.exe windows:6 windows x86 arch:x86

44e9b22676bd83c57bd35d4c7a0b7409

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLogicalDrives
HeapFree
SetPriorityClass
VirtualFree
GetCommandLineW
GetCurrentProcess
WriteFile
VirtualAlloc
GetModuleFileNameW
WaitForMultipleObjects
SetThreadPriority
CreateMutexW
CreateFileW
ReleaseMutex
GetLastError
GetCurrentThread
CloseHandle
GetSystemInfo
CreateThread
HeapAlloc
ExitProcess
GetProcessHeap
CreateProcessW
lstrcmpiW

user32

wsprintfW

shell32

CommandLineToArgvW

Sections

.text
Size: 1024B - Virtual size: 931B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ