d6c7764539e896af6c9518005bcc6522 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d6c7764539e896af6c9518005bcc6522
Size

360KB
MD5

d6c7764539e896af6c9518005bcc6522
SHA1

da54a072987d495e7ba0266b56db6b4c4d5600e3
SHA256

6f2070fa744576daab968f463e9377ab4016d2306227563a232ed02644fee65a
SHA512

d4d29c39b5a137b624a742a2c107c08c7d61b3c8812ba3fb527f893aba601720c2d6fa936019ec93d3cbfa60e210ac6e55596d05c3373ed1e90a9b0307c14099
SSDEEP

6144:MMdOLd2izH11RAIlnG7CLES3XGOSm86svhr7FHO6InPMzqV:MMqd2AV1RAIlnrX7/09Fu6IKq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6c7764539e896af6c9518005bcc6522

Files

d6c7764539e896af6c9518005bcc6522
.exe windows:4 windows x86 arch:x86

af6d3969321182c11f5bbcdff147fe05

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtect
GetModuleHandleA
CreateSemaphoreA
GetExitCodeProcess
GetTickCount
CreateMutexA
SearchPathA
GetCommandLineA
CloseHandle
GetModuleFileNameA
TlsGetValue
GetDriveTypeA
GetLastError
GetComputerNameA
SetLastError
FreeConsole
ReleaseMutex
Sleep
FindClose
DeleteCriticalSection

shell32

SHFree
DragFinish
SHGetMalloc
SHGetNewLinkInfo
ShellAboutA
SHAlloc
DragAcceptFiles
SHGetSettings
SheGetDirA
ShellMessageBoxA
DragQueryPoint
DragQueryFileA
SheChangeDirA
SHGetDiskFreeSpaceA

loghours

DirSyncScheduleDialogEx
DialinHoursDialogEx
ReplicationScheduleDialog
DialinHoursDialog
LogonScheduleDialog

advapi32

RegCloseKey

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ