b6bd72ec9d550c0b4bc9a4726538e6c8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b6bd72ec9d550c0b4bc9a4726538e6c8
Size

75KB
MD5

b6bd72ec9d550c0b4bc9a4726538e6c8
SHA1

cc4fdbc6c21e92feb56d566ab409cf8a82981139
SHA256

2dd142769f7cef12006b60109e813a4c11a1a4e1f24eba17064b17ec839554d8
SHA512

1b98c5a3224ce1315a8f870554be6c1ca920eb62c9e674894e5aec875c6d73dd7f2265c0d14e77d247a0cb75ece3a5cbcf731e2e8d3326ad9fc04c1b3a5678f9
SSDEEP

1536:0R4JbQCph/VWTm6qWh25Wpo+JFFIalk1U6gB6sp+G7Ht3P5y06gsONFb8:0Rgja00oUFFFlk1yQs8G7N/5ygsONy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6bd72ec9d550c0b4bc9a4726538e6c8

Files

b6bd72ec9d550c0b4bc9a4726538e6c8
.exe windows:4 windows x86 arch:x86

f13fb11202590bce39525477ec83f22f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAllocEx
LoadLibraryW
SetErrorMode
WriteConsoleOutputA
HeapAlloc
FatalAppExitA
SetTapePosition
GetHandleContext
FormatMessageA
SetDllDirectoryA
LZCopy
GetPrivateProfileSectionA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 61KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE