6e9c439b14a4019e105a18b0b9672283dadb89d544986616c3d9f2b7470098d4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6e9c439b14a4019e105a18b0b9672283dadb89d544986616c3d9f2b7470098d4
Size

145KB
MD5

a51a406d86a66f8547cb114d6868cc5c
SHA1

72475e3ec0fe04e1ef0cc887cbec860f928d01ce
SHA256

6e9c439b14a4019e105a18b0b9672283dadb89d544986616c3d9f2b7470098d4
SHA512

eac665f7ba4054db3880bce6420a480b211c33742377d5479d0f6a612c34cda00a1637a146a6d133dfee6925130e14dfbbcc5a192d2f206f15fd6937be022719
SSDEEP

3072:UFiXoQTi/vkN/7FIIg+OnbNpEvNzPfWIiJP4EsrrLSOZtCA:Uc4QTiEN/7LtAb7KNzPEPTsXLiA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6e9c439b14a4019e105a18b0b9672283dadb89d544986616c3d9f2b7470098d4

Files

6e9c439b14a4019e105a18b0b9672283dadb89d544986616c3d9f2b7470098d4
.exe windows:1 windows x86 arch:x86

01fe59aa5709aef888d837c5be5cf77d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

crypt32

CryptBinaryToStringA

kernel32

GetProcAddress
LoadLibraryA
RtlUnwind
VirtualProtect
GetModuleHandleW
CloseHandle
WriteFile
GetCurrentProcess
GetLastError
GetCommandLineW
CreateFileW
GetVersionExW

user32

GetWindow
LoadStringW

crtdll

__GetMainArgs
exit
raise
signal

setupapi

SetupDiEnumDeviceInterfaces

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 40B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 936B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc2
Size: 204B - Virtual size: 204B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE