b6047c096b1a443837fb452ef79546ba | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b6047c096b1a443837fb452ef79546ba
Size

505KB
MD5

b6047c096b1a443837fb452ef79546ba
SHA1

2caef9ac24c237bd24b68788981ef2117dbf7827
SHA256

141cf6328e3d1d41e4239b0e7a14cf1f2db95e6f2dd124bf9af6fc76830259d6
SHA512

d4cb603a73d184e752892f690dda0fefe1f8a59e482eb8b7fe7caaea780578f69e6c1312e2b501f3a3b6a2b8416849da3ecf24af775a2ccc1e52c1c56c4c42f2
SSDEEP

12288:Eyq0/VmlQlW1XpkDfIgsaf/TTjkuz5GU5STDyi8jyMFl:NXdmWlW1Xyzsaf/vGUK7CZ3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6047c096b1a443837fb452ef79546ba

Files

b6047c096b1a443837fb452ef79546ba
.exe windows:4 windows x86 arch:x86

1a664ff45b122e7617ade728516e06bf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

LoadStringA

gdi32

GetTextCharsetInfo

advapi32

CloseServiceHandle

ole32

CoInitialize

oleaut32

VarUI4FromStr

setupapi

SetupIterateCabinetA

comctl32

InitCommonControlsEx

Sections

.text
Size: 381KB - Virtual size: 492KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE