b6ec6f1597c0894a4fe7e7143c41b72a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b6ec6f1597c0894a4fe7e7143c41b72a
Size

164KB
MD5

b6ec6f1597c0894a4fe7e7143c41b72a
SHA1

6e3dcb61c024b7c53e00080a96f36a8db4923121
SHA256

dd91f0122d0ac6d8cc7e634d2edc00c7e68ab70b92c2d9c6a3c2b0dbce7811be
SHA512

836c298ca877fbb1d5f57a04c9627084de9b781a141621e7a696b783138272c36c0e987fc8d9e2dc40e25e2b9185d3812c1572222851e051a45f2717f1ccea58
SSDEEP

3072:7rBupLDVE6xErnRJrf2f6JeZvjEAvQkwUyD2xfGUXIEk5SPEX7v:RmW6UtYRIAYkNyGfGZLoa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6ec6f1597c0894a4fe7e7143c41b72a

Files

b6ec6f1597c0894a4fe7e7143c41b72a
.exe windows:4 windows x86 arch:x86

7ff4c0bf321014ece3e5e94e7edae5b9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

FreeLibrary
EnterCriticalSection
LoadLibraryA
LeaveCriticalSection
GetProcAddress

Sections

.text
Size: 163KB - Virtual size: 180KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE