b6fa8934d4e884a9b10887fa8ada0371 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b6fa8934d4e884a9b10887fa8ada0371
Size

38KB
MD5

b6fa8934d4e884a9b10887fa8ada0371
SHA1

8fc87442a4a1f420d3940c99d8e986ee24e08b78
SHA256

dc395d13e0bad63cf424bf2c849f7b42d54eb1fb93653fed66359f02f3fac048
SHA512

517a0d376eee628edfc44168644ba4fad98a0bbae07780be2d9e1c1e2ba41fc26fa23976ea1f4a33a297b7433324cbe699a9aae44fb8c2cffcfd015e2b15c62e
SSDEEP

768:h2BYcBsjbiWQ0yjRdTQTokDFcPae1ETvniTxUug1wW9M17smTOAsvU:9jbiWujLfuVYcGdW9M1QlvU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6fa8934d4e884a9b10887fa8ada0371

Files

b6fa8934d4e884a9b10887fa8ada0371
.exe windows:4 windows x86 arch:x86

f433e7fcc51e68080022754836705744

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree

user32

MessageBoxA

Sections

.packed
Size: - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rg75hnt4
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

i49vcnzj
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

sloa3y5n
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

wu9qsof1
Size: 36KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

zb226bgb
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ