b6627505fac32762214cce4c4b691d03 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b6627505fac32762214cce4c4b691d03
Size

6KB
MD5

b6627505fac32762214cce4c4b691d03
SHA1

2afae7cd87516ff306fd12720a664c04a510a7be
SHA256

197a58662733771339afb5965e5dd90629e3d2044cc0f94b88d33b6563e387dc
SHA512

d9d7fa0953b165a8226491bcc7295f5a7310e858a4fc1efdbe2ed9fe39bc4ebabf1547ef4964ba3acbdfd06964dea1beab698356bb1f0d3683738a6433c0ac9b
SSDEEP

96:xD8LDG8m0dyc5csG6CTgCMkN8XAyM3fFKdja91/CyPsOoVLc7/K4hdmZun/:xDkiodyL6GfFKdKlPDoVLc77mZun/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6627505fac32762214cce4c4b691d03

Files

b6627505fac32762214cce4c4b691d03
.exe windows:4 windows x86 arch:x86

5cdfec656afb4af2ce677d52d8194254

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ResetEvent
lstrcatA
CloseHandle
lstrcpyA
GetModuleFileNameA
GetProcAddress
WaitForSingleObject
CompareStringA
CreateToolhelp32Snapshot
ExitProcess
GetModuleHandleA
CreateEventA
LoadLibraryA
Process32First
RtlUnwind

user32

BeginPaint
ShowWindow
IsWindow

advapi32

RegCloseKey

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 906B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 388B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE