b6ae6fae01a10c93403a4071a9b3e6c2 | Triage

Sharing

General

Target

b6ae6fae01a10c93403a4071a9b3e6c2
Size

12KB
MD5

b6ae6fae01a10c93403a4071a9b3e6c2
SHA1

a181c1c449de428be913b38be96a89024c4f6ee5
SHA256

61c7f536dd9636b11e75ac46337c852a3ca1f22ded1ccc1679db97a660932e02
SHA512

8266a6140a0d953f82b2a0e1f28c780d7b59f629748a4caad08da05c455726301e488d63b612a49e50a7ad05d9cf3db880eb9938f09ed4b8af8b3e2ca9790596
SSDEEP

192:2oQjMiX1qwJfMiinhtlHrqycSM7VV3ZcKHzd6TJNqBpf/ZU95FmZKgnXDaAvWAT:Xs7FqwJfMHhtoRSM7fSgzd6EF/maZpn3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6ae6fae01a10c93403a4071a9b3e6c2

Files

b6ae6fae01a10c93403a4071a9b3e6c2
.exe windows:4 windows x86 arch:x86

50abaea1ada252d208c311bda2c6d021

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtect
VirtualAllocEx

user32

FindWindowA

Sections

.text
Size: 1024B - Virtual size: 570B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ