b6d8bba3c34f1ee7c620422011e9582c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b6d8bba3c34f1ee7c620422011e9582c
Size

193KB
MD5

b6d8bba3c34f1ee7c620422011e9582c
SHA1

0a216e162464c83cc992fc7fc6b2f3fdc186ab39
SHA256

b3fedbc46ff3a08092d57a3dfe5d77fb01fbe835fd96b0b9947329c0a1918b9c
SHA512

61174c6c2b2e955f743ecde16cb488a104ccfb8de8601f23cc09f82c518e2078caeaac2f0d847c737b8a353e19983ced037243ea649ca44824e9f2d077e55c68
SSDEEP

6144:7f+AwDHmBhZdUYS22HtkC+3WomtUP3mTBseyQRixJ:uyHS/tkGn6mTZiv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6d8bba3c34f1ee7c620422011e9582c

Files

b6d8bba3c34f1ee7c620422011e9582c
.exe windows:4 windows x86 arch:x86

94ec552593b734581b14adb46afcbec6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
ExitProcess
GetCurrentProcess
LoadLibraryA
LCMapStringA
CloseHandle
CreateFileA

user32

SetWindowLongA
wsprintfA
CharLowerBuffA
CloseWindow
CreateWindowExA

advapi32

RegOpenKeyA
RegSetValueA
RegEnumKeyA
RegQueryValueA
RegDeleteValueA
RegCloseKey
RegCreateKeyA
RegDeleteKeyA
RegEnumValueA

Sections

.text
Size: 144KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ