b6284a63b1fb4467ec01463fd939bdf3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b6284a63b1fb4467ec01463fd939bdf3
Size

806KB
MD5

b6284a63b1fb4467ec01463fd939bdf3
SHA1

36aaf2de839fe97e8079ecbf86e419c5c6b150ae
SHA256

6e0c4b3b9946c01a7a0604b164a40345568ef2783205ba2122152d8ed9be93ae
SHA512

6c470e2e9730586cc10a44b4c238b355d722aca2a1fe9e1b1e3e7077f1fecd576c2cc45625b94f9b41be2f6f4d5d61803c3a9f0b17d138e4f7e82fb8dd39206d
SSDEEP

24576:uPHKlw9/rdYRDAf8CfJmJoHzcpkiMX6L:uvK0zdSDA7x3cpk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6284a63b1fb4467ec01463fd939bdf3

Files

b6284a63b1fb4467ec01463fd939bdf3
.exe windows:5 windows x86 arch:x86

f9f222642ace4c9733079cb7bf8b0135

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

shlwapi

ColorAdjustLuma

winmm

mmioOpenA
mmioClose

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc

user32

GetMessageW

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 791KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ