d6bd57cab9a651384229d8246dbe2e8b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d6bd57cab9a651384229d8246dbe2e8b
Size

222KB
MD5

d6bd57cab9a651384229d8246dbe2e8b
SHA1

e42428dd99293adb5764e350444e2fb687196749
SHA256

fc3d14844b448787a164e228fe92831fe77c389b532e1a0371414ac0d9fc5c17
SHA512

7cabde6abef269ab69d722fa9e57b584f0614eb2b7a272a57e99a4c9fea95d24844abec9a8eb71341e207f7e2bd6ebe18bdae62beeba66e40772c601d1f05565
SSDEEP

6144:MbvysgGOZ2Uvdw9LCkOM9Ht0TtdP+eRHI:Yvysujvdw9u89HtAtd2eRHI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6bd57cab9a651384229d8246dbe2e8b

Files

d6bd57cab9a651384229d8246dbe2e8b
.exe windows:4 windows x86 arch:x86

b71d8c1931cb0a297806c1529ed52c6b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualAlloc
ExitProcess
FindFirstFileA
GetCurrentDirectoryA
ReadFile
CloseHandle

Sections

.text
Size: 220KB - Virtual size: 224KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 240KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ