b6e2826dd22da9fbe7b69520114b3c3d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b6e2826dd22da9fbe7b69520114b3c3d
Size

36KB
MD5

b6e2826dd22da9fbe7b69520114b3c3d
SHA1

d4bee0215d1f4c1a6b5bcfea3d8fd6a284187332
SHA256

c258c837f6ab1ba71a47ac4e98c04bbf11360a9e92be8a1941452251eb644734
SHA512

158af142cb58d5809922e2a20dca42b0fda3c2cdd3ac4cbc096c015d176aea9c7e7c34718a78b0a358a3e4b8cff0376563f036c551baed4145bc520d77f3de6a
SSDEEP

768:q+u+X9CxzRprjQNncxhevZEb/n/Casd3hUHdx7UScqHAXUJUkKdzN4g:q+u+QzRprjQkQZq7stGfsdzN4g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6e2826dd22da9fbe7b69520114b3c3d

Files

b6e2826dd22da9fbe7b69520114b3c3d
.exe windows:4 windows x86 arch:x86

abce258d234e9ef2c5eed5e018ed8805

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

iphlpapi

GetAdapterIndex

kernel32

GetModuleHandleA
GetProcAddress
GetLastError
LoadLibraryA
VirtualAlloc
VirtualFree
ExitProcess
CreateThread
CloseHandle
GetTickCount

advapi32

RegCloseKey
RegSetValueExA
RegCreateKeyExA

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 486B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE