c6303b28407aa09053911af9515be722 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c6303b28407aa09053911af9515be722
Size

787KB
MD5

c6303b28407aa09053911af9515be722
SHA1

abaee73c42c080d40221db0f09945c3d7b792169
SHA256

6bf294421eb3f3c68486d30e39b7183b9e5fe24b41c7e75d566b25f25fbb171b
SHA512

239d10ded285e26d3b3609fbf819354c93ce03efa668333d204f660ffdfcb8e17247a6f71e425dd96028e4dc83559a728fcae766da52fb4bcd355b2e5a607bcc
SSDEEP

12288:sDjGgvsOdjHr+IX+KbmfXNSJYoMRHWvr1q924bvfKlMFtEcoxBSbdFdRU+8jy52:OsAJX+KbmfdSJYoFvxqglgloxEdno

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c6303b28407aa09053911af9515be722

Files

c6303b28407aa09053911af9515be722
.exe windows:4 windows x86 arch:x86

94dbd26253683f1e2490c1277122c99f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GlobalUnlock
CreateFileA
SetEnvironmentVariableA
lstrlenW
PulseEvent
LocalFree
GetConsoleMode
Sleep
GetModuleHandleA
HeapCreate
LoadLibraryExW
GetStdHandle
CreateMutexA
ReleaseMutex
FindResourceA
TerminateThread
SetLastError
GetCurrentThreadId
TlsGetValue

user32

DefWindowProcW
DrawEdge
CopyRect
IsWindow
DrawMenuBar
CheckRadioButton
GetIconInfo
DispatchMessageA
GetDC
GetDlgItem
SetFocus
FillRect
CallWindowProcA

uxtheme

DrawThemeIcon
CloseThemeData
GetCurrentThemeName
GetThemeBool
GetThemeColor

dpnet

DirectPlay8Create

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 778KB - Virtual size: 778KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ