d6da92993819d60b42873b6b38fdba4d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d6da92993819d60b42873b6b38fdba4d
Size

83KB
MD5

d6da92993819d60b42873b6b38fdba4d
SHA1

ce68d0f9b79a0c205a5dfbb64b7375155029bc35
SHA256

2cc8c1f667b44a932e327e86aee0aa0cbeb2da0f09447fe5e234dc94e6186b23
SHA512

3807fac5f6e5e1528c92ac39eb705e24068b1c67d6a29cb0de609179fb3eba7947adccf1646b05ac56545bf11cc048291141c7c4d5095f29b16029acf180ece5
SSDEEP

1536:auiIMeNq+cJvfc2hry06eQu3nE1hrXe2M/deTypjVrs2ryrd1vUQuqwcizSkX:aCZq+cBFry06BuU1V+/dyyHs2quciu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6da92993819d60b42873b6b38fdba4d

Files

d6da92993819d60b42873b6b38fdba4d
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

0b3566561e57a113bef440657d7edd48

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WritePrivateProfileStructA
RemoveLocalAlternateComputerNameA
BaseUpdateAppcompatCache
SetConsoleCursorMode
NlsResetProcessLocale
VerifyVersionInfoA
FindFirstChangeNotificationW
GlobalHandle
CreateProcessW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE