c6742e0de2e2c8409963501296ac2ce6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c6742e0de2e2c8409963501296ac2ce6
Size

132KB
MD5

c6742e0de2e2c8409963501296ac2ce6
SHA1

55d57a8dd2f53354c9840e3b9b13272dde4a0651
SHA256

2ea859c11b524b464f522a27a0c363002b3651cf85460c9768f52d806985e813
SHA512

8f6b64a5fad08b24c5c86c72c10706f440261f7db1d298f2c3efcb10171a431db5c3cfd32cab77380c8b165dbdc47c2b0db7a25bd9df021adb02596a15245985
SSDEEP

1536:bUfy1eDFfiJFikeA+ZsQMc2dCW9L/LdZ+5vjG7Zhj1TW3sseLi/KAVpuAnIJZpd7:8KiFm8kq52dZSvjoZhRTW3sBrA+QO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c6742e0de2e2c8409963501296ac2ce6

Files

c6742e0de2e2c8409963501296ac2ce6
.exe windows:4 windows x86 arch:x86

04bd86412876ef0179ae8c16a323727a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetNamedPipeInfo
WideCharToMultiByte
GlobalLock
SetConsoleOutputCP
lstrcmp
BuildCommDCBA
TryEnterCriticalSection
GetCommProperties
GetVersionExA
GetProcessTimes
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

icode
Size: 8KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

idata
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

idata
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ