b6afad4d9547509973fe7402f293922a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b6afad4d9547509973fe7402f293922a
Size

112KB
MD5

b6afad4d9547509973fe7402f293922a
SHA1

778300ecb39fb4355e645c2e95ea8cc0b5361a60
SHA256

dd290dc1a16fa409a748bcc6007ba545e4de101a6da1d51c065785d2b636b0a7
SHA512

63edf430d03704a98a63bf9d9923170c9c2add92a150cd0944a241036465df81c6eb006b1118f1510dd50ef3118ccce85b3929d69c1fabb0e27700b45cfafd09
SSDEEP

1536:sytPtNEriG5oaglJ66cuPaloBPGzLCTZvLbBlDHSQCMZOe8VfFSpi/3aW8vost2:sytLEn5GxasPGidjV4/Ziost2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6afad4d9547509973fe7402f293922a

Files

b6afad4d9547509973fe7402f293922a
.exe windows:4 windows x86 arch:x86

b11a107a578ac9fd3385985d7ccde7dd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDesktopWindow
GetParent
GetSystemMetrics
GetDC
TranslateMessage
CharNextA

kernel32

GetCommandLineA
lstrcmpA
lstrlenW
GetSystemTime
lstrcmpiW
GlobalFindAtomA
DeleteFileA
CopyFileA
QueryPerformanceCounter
RemoveDirectoryW
FindClose
lstrcmpiA
GetWindowsDirectoryA
lstrlenA
RemoveDirectoryA
GetModuleHandleA
VirtualAlloc
VirtualFree

gdi32

CreateCompatibleDC
SelectPalette
RectVisible
DeleteObject
GetStockObject
SaveDC
SetStretchBltMode
SetTextColor
RestoreDC
GetDeviceCaps
CreatePalette
DeleteDC
CreateFontIndirectA
SetTextAlign
CreateSolidBrush
GetTextMetricsA
LineTo
SetMapMode
GetClipBox

glu32

gluNurbsCallback

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ