d6b9407b18b0ef5cc3cab7831afd088e | Triage

Sharing

General

Target

d6b9407b18b0ef5cc3cab7831afd088e
Size

83KB
MD5

d6b9407b18b0ef5cc3cab7831afd088e
SHA1

27fa4c839884ee6b009be1b56750d0b1d8ccad70
SHA256

0ece9dfe590254c16c6a8965a6f0b2b45466ab515aa2c66b795ed32998381f33
SHA512

e72e9bc0498f8f2b1500afdf0684daafbb982a5b2528e10206be520bd3c4abfa3e90cdaad2be38a07ade34173cd0d4dea9d4e764ab83553e48072c69d02653c2
SSDEEP

1536:5mN1NXyLwZvnAgt7gzygAK8k3TVtah3fEjg94TVn67hXIQjEErxTWDTMqhGKYIZg:5o3XkwVvwfAdk3THaEjg94RnWjBkMqhW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6b9407b18b0ef5cc3cab7831afd088e

Files

d6b9407b18b0ef5cc3cab7831afd088e
.exe windows:4 windows x86 arch:x86

f535776648eae42dffb11dbfe9ca7cb3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetThreadSelectorEntry
HeapFree
lstrlen
GetConsoleCursorInfo
VDMOperationStarted
PostQueuedCompletionStatus
GetConsoleFontInfo
BeginUpdateResourceA
TerminateJobObject
OpenMutexA
GetConsoleAliasesW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE