b6e8f0893f12c79ad95df59f0086d912 | Triage

Sharing

General

Target

b6e8f0893f12c79ad95df59f0086d912
Size

364KB
MD5

b6e8f0893f12c79ad95df59f0086d912
SHA1

dfa60c253d98673f2b92e77ee34c4dfa34613be1
SHA256

845434ac822d6633dabb19366aaccb86f80f3e06398d23c439cc0c865bebcee1
SHA512

90f35af443f9bb32004a2a996da10785f2ab8b6e75edd7a73565feacc74c5029c6e892b203d3e8fc839bb2393543f3b9afd741e7fe7717963135146a8a9aa891
SSDEEP

6144:/e+n9bzspGrSFSFPzI2wNcc6GdSDqtaInfAI4wke6N4Rp4nJywhi:2e0pGrSscLNc8dSetacfVxfAnJy+i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6e8f0893f12c79ad95df59f0086d912

Files

b6e8f0893f12c79ad95df59f0086d912
.dll windows:4 windows x86 arch:x86

6f5d85d4c5fd6e161d4f62d75eef93b5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

DrawCaption
DestroyWindow
DestroyMenu
DestroyIcon
DeleteMenu
DefDlgProcA
CreatePopupMenu
CreateMenu
CreateDialogParamA
CreateDesktopA
CreateCursor
CreateAcceleratorTableA
CharUpperA
CharToOemBuffA
CharPrevA

kernel32

LeaveCriticalSection
lstrcpynA
lstrcpyA
lstrcmpiA
lstrcmpA
lstrcatA
WriteFile
VirtualFree
VirtualAlloc
TlsGetValue
TlsFree
TlsAlloc
Sleep
SetCurrentDirectoryA
ReadFile
RaiseException
EnumResourceLanguagesW
EnumResourceNamesA
FindResourceA
GetModuleHandleA
LoadLibraryA
MapViewOfFile
OpenFile

Sections

.text
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 141KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 187KB - Virtual size: 447KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE