c6c189df8a8d9f0f64236577737b5e1a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c6c189df8a8d9f0f64236577737b5e1a
Size

250KB
MD5

c6c189df8a8d9f0f64236577737b5e1a
SHA1

78a82366bbbe54885ca2dd07b0dbdfea2cbca34f
SHA256

eaf78947cf0f6404d0869618d8ce661d0e279da15a4504ee2e86480d86d1ecc4
SHA512

8eae77e1e3bf3f85f5ce449b199484301af5249ae8fb8dbf2d64e737d839e260f92002f27458f23630d1dfa767b945d518b29e97301a5b826b1a750f41786288
SSDEEP

6144:NJpHSZuAtVRg97+McbxJSaYV5bRVl4sRADgehV3WCeu4:Nza3s97GSaY9b4smDBh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c6c189df8a8d9f0f64236577737b5e1a

Files

c6c189df8a8d9f0f64236577737b5e1a
.exe windows:4 windows x86 arch:x86

bf37b27f1e630061a1a370b39ea6c343

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

mpr

WNetGetConnectionA

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

Sections

CODE
Size: 232KB - Virtual size: 3.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE