d6b1c233cc622b0db912564e179172df | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d6b1c233cc622b0db912564e179172df
Size

137KB
MD5

d6b1c233cc622b0db912564e179172df
SHA1

d19e50456532b71dd88f81d254c2f1c918d78e6b
SHA256

1ee6f9512af3d11ba27c5cf6a5c59bbe88664d15f65b5c1aee08496b593819e3
SHA512

ba8d36441dd9d4984e56ed109106acc086f8cad99e734f115620272865731ace6268f61dc1d17dcdad72545160faf6766d69ae927fd802421bf297bf6b332897
SSDEEP

3072:cZfxn06M/W+ttzjuNU+jZMDlnzpM+Q63O7+f/CIGj:6n060W+L/36ZMZ1M+b+7+HCI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6b1c233cc622b0db912564e179172df

Files

d6b1c233cc622b0db912564e179172df
.exe windows:4 windows x86 arch:x86

88ef4abe48289eb6dcaad7a516f9891c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateProcessW
GetCommandLineW

shlwapi

StrCatW
StrStrW

Sections

.text
Size: 512B - Virtual size: 461B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tdata
Size: 93KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ