b6a3a0c02bdf28fe0f71791f4d39c08c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b6a3a0c02bdf28fe0f71791f4d39c08c
Size

24KB
MD5

b6a3a0c02bdf28fe0f71791f4d39c08c
SHA1

4022f9a9bdd9c8fc8c2bf3cfc12561b5fb99a134
SHA256

193c59dbddfc8eb1748bef045a0b7c3af9c9763585ba26627c05fd5cfe5a0044
SHA512

681878cb5bb1cd8a04d60ce30895efe737f2b6d179253ef14890522578444785f2d6d4a914ebc2d4aeb880d5229d43b9ad13b9a6fc8f2b07ab026d83fb381fb6
SSDEEP

192:UbUHwZDizASUJVSdE1h189rQXVtIuvJLmZBdZDY0T3SFmKfYELS3dL5z1LyyZAPd:sQA16/gtrmlz3afgyyZAurh6oZ2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6a3a0c02bdf28fe0f71791f4d39c08c

Files

b6a3a0c02bdf28fe0f71791f4d39c08c
.exe windows:4 windows x86 arch:x86

9b596a6586801753f15723d27addd831

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegCreateKeyExA
RegCloseKey

kernel32

GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE