c6224363e091bbf3c606248d67fc397d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c6224363e091bbf3c606248d67fc397d
Size

83KB
MD5

c6224363e091bbf3c606248d67fc397d
SHA1

5c415fb77d270941f793b9c9d9d043ce4b1bdbf2
SHA256

c3536b606aeda8e155fcc38e8018ee9e0194cba775bb66c328edaa1943d98af0
SHA512

3eead8995f2b2a09d5c2b1a890f718c95fb3587678a7a9c88d522c8fafcd18d2bbc167d3f7fdf29e6070635aedf777e1defce2fad1f7ec8b735a4c75360ba13b
SSDEEP

1536:uoVxY4av6DuKfHkIYRBqhJGQRbGO+RZicKTjEErxTWDTMqhGKYIZTET8bDQ:FxYn6DuKBKqbD+z2TjBkMqhGKZTbbc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c6224363e091bbf3c606248d67fc397d

Files

c6224363e091bbf3c606248d67fc397d
.exe windows:4 windows x86 arch:x86

7f7efd5bedeb34f7ca7431a786500e90

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AllocateUserPhysicalPages
VerSetConditionMask
GlobalGetAtomNameW
SetConsoleWindowInfo
QueryDosDeviceA
GetPriorityClass
PulseEvent
SetConsoleNumberOfCommandsW
CreateFiber
SetCalendarInfoW
FatalAppExitW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE