c6494a649e018bd0c91d43d535f86b06 | Triage

Sharing

General

Target

c6494a649e018bd0c91d43d535f86b06
Size

57KB
MD5

c6494a649e018bd0c91d43d535f86b06
SHA1

f81c5599b140b454a1c42de2490fe9b3cdb42bec
SHA256

900d29c4ed080a1934273921fff33c4660211042bbac84998ed587568ca17c53
SHA512

76be980fa6b031cb361c00a46d581279aa3a149822d4312f2b2227bd1c43db9261e64345d3d56097d68ff902332593866b8dbf16b88468e2d32eb48bafd8ec6a
SSDEEP

1536:JRnYYTwlbExWiPIJK5qguBETYEgZjwNekc:sYTwhExW5K/uBYisF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c6494a649e018bd0c91d43d535f86b06

Files

c6494a649e018bd0c91d43d535f86b06
.exe windows:4 windows x86 arch:x86

187667a26def4214bc148333c694b24f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
FindAtomA

user32

DialogBoxParamA
CopyRect
GetWindowTextA
CopyIcon

comctl32

CreateToolbarEx
ImageList_Destroy
CreateToolbar

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 27B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 357B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ