b6afd129645ce4f9984543cb12bb496a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b6afd129645ce4f9984543cb12bb496a
Size

355KB
MD5

b6afd129645ce4f9984543cb12bb496a
SHA1

9a67ddbfb03b51a792b6d17678c4ced7e013ef97
SHA256

69d69a86dd53e81abe0fc44b0e83022b1f9ad0fad576e4aa83e9a9920a67d443
SHA512

adacab9010cb8e364050fc9d98f1228298780556896f3ca166e679e4b8f980b9b7a996e789ae677cbcad4abbb0842ba120a88ecce677a2c5766db116ab1f5d2e
SSDEEP

6144:/Ro4c+AnxxURnEbremqbTbKq2Was0OVM9s84O4EZZqZzvlcK:S+AvURkwbTbj5a9J9dV4Uq4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6afd129645ce4f9984543cb12bb496a

Files

b6afd129645ce4f9984543cb12bb496a
.exe windows:4 windows x86 arch:x86

37af3ec161d07a3f42e74e8d7b911eb3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcessId
LockResource
LoadResource
GetLocaleInfoA
FindResourceA
LocalAlloc
LocalFree
CreateFileA
lstrcmpA
GetFileAttributesA
GetProcAddress
GetModuleFileNameA
GetTempPathA
DeleteFileA
CloseHandle
GetCurrentDirectoryA
FreeEnvironmentStringsA
GetEnvironmentStrings
SetHandleCount
GetFileType
GetTimeZoneInformation

oleaut32

SafeArrayDestroyDescriptor
SafeArrayDestroyDescriptor
VarFormatNumber
CreateErrorInfo
OleLoadPictureEx
GetErrorInfo
SetErrorInfo
GetActiveObject
VariantInit
SysFreeString

msimg32

TransparentBlt

Sections

.text
Size: 243KB - Virtual size: 279KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 988B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 109KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE