c6b929670499cfb79a27b5bb938ed9ec | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c6b929670499cfb79a27b5bb938ed9ec
Size

76KB
MD5

c6b929670499cfb79a27b5bb938ed9ec
SHA1

9d0dc5189be90beedb5fa5fad4815659f705a079
SHA256

e09096f245e5acde96876c5ebeeb1a42c72ea36a5653671c2523c9fe2d66f146
SHA512

2c0930fe0d1e2526e63bc5a1564286d0763f6eeace9108bed08317ffc76893c3d8caaaeefcea24a05318e366d1477e3cd2f067ced540a45885ccb7bc90ab39f7
SSDEEP

1536:h3Aq3/jZqO4Z4OCV75uxQjlBi7I/GZiRMLVfcf52L6y88b85KbLVU8jgfzXtoYOr:h3Ag/NqO4Z4OCV75uxQjlBi7kGZiRMLv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c6b929670499cfb79a27b5bb938ed9ec

Files

c6b929670499cfb79a27b5bb938ed9ec
.exe windows:5 windows x86 arch:x86

8174725c8f94ff21668c708f1d71f346

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateIoCompletionPort
AssignProcessToJobObject
RtlMoveMemory
VirtualAlloc
CreateNamedPipeA
DeleteFiber
SetCurrentDirectoryA
LoadLibraryA
GetProcAddress

user32

RedrawWindow
CheckMenuRadioItem
AnimateWindow
GetMenuState

gdi32

CombineTransform
BitBlt
GetTextCharsetInfo

Exports

Exports

niphpfakenhjgwk
rrixslxeppkchv
wvpfmzkdjzwvdp

Sections

.text
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 756B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ