d6bfc9986b7eeb937da5b8c751a7e4aa | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d6bfc9986b7eeb937da5b8c751a7e4aa
Size

61KB
MD5

d6bfc9986b7eeb937da5b8c751a7e4aa
SHA1

010efd707c7d718b03da9892798231c1c5c24185
SHA256

5bacb55000ed74ef5a6d539e71a16fe1f340c7dd5e2ee9fd0379f567f3765c12
SHA512

898ccb56b24b82041daff5a2b50f839615e2b798f83cc5e8338788c137ba8d93a3e576857e921d0e40ea6a872e168ebb9e01545d79f8f62a204c38c933f7a8ed
SSDEEP

1536:73VaJ+BHnnuXxeiXBYfii1Hpglkhcz1eaEpZ1rR80:7VnlixH2fz1mlkWsPpLrR80

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6bfc9986b7eeb937da5b8c751a7e4aa

Files

d6bfc9986b7eeb937da5b8c751a7e4aa
.exe windows:4 windows x86 arch:x86

c5390a8a383227d9f1b222ca6dbdbcb5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

RegisterClassW
OffsetRect
MessageBoxW
MessageBoxIndirectW
MessageBeep
FillRect
EmptyClipboard
DispatchMessageW

kernel32

GetTickCount
RaiseException
GetOEMCP
ExitProcess
WideCharToMultiByte
lstrcatW
SetStdHandle

advapi32

RegSetValueExW
RegOpenKeyExW

comdlg32

GetOpenFileNameW
GetFileTitleW

Sections

CODE
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ