c6a6dba107fc08db1e2215861b7536e4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c6a6dba107fc08db1e2215861b7536e4
Size

17KB
MD5

c6a6dba107fc08db1e2215861b7536e4
SHA1

6f5c71765f7f635c9610f4cc85c04104cb6630d7
SHA256

8e37606da69c77ed0160f5ffe09a3c1e80c00490593a924b0eec399ceff62b97
SHA512

bfb569a1a127b46f69cdd86940b374569e542f077e62bf97e8b91c0a97d56a6186912cc45486a82dfab17b0c5b7b62f7e1e4a854a5159e8553daebd3c8e528c9
SSDEEP

96:2x7ngo+g2fm5aUScNV2rbpRTjUKpWB5rzvdWrQ:mgoOfm3Scmrf18B7eQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c6a6dba107fc08db1e2215861b7536e4

Files

c6a6dba107fc08db1e2215861b7536e4
.exe windows:4 windows x86 arch:x86

c162473f2b23a9ebcac3fd8a0fcf7b1d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDCEx

kernel32

CreateThread
ExitProcess
GetLastError
GetTickCount
Sleep
WaitForSingleObject

gdi32

EnumFontsA

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 384B - Virtual size: 320B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ