b6ab1b0fd6b0d5cb0be2a14d8408bd82 | Triage

Sharing

General

Target

b6ab1b0fd6b0d5cb0be2a14d8408bd82
Size

416KB
MD5

b6ab1b0fd6b0d5cb0be2a14d8408bd82
SHA1

0db55baecc761c049fb54e370ee6dc458aeef192
SHA256

1a3294070c215b142dbf629e57b89119b247a7b21b4d5471a4a5e9c9cfc5b558
SHA512

8a411f6902712fd58ad326a0811c0b189622d5c4959abe94e448813bb8e7e2ff741ac2825faeeaff7bfcb85b33b309d09abab8de485723aa23036531c8dd73c3
SSDEEP

12288:8tDVVMgzBpxG+zQZJXCBvnvMqUWGYCivep:2ggVRzQZJXCBH8ijK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6ab1b0fd6b0d5cb0be2a14d8408bd82

Files

b6ab1b0fd6b0d5cb0be2a14d8408bd82
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 256KB - Virtual size: 466KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 84KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE