d6e926d73e8e1ed398255ff787781d3c | Triage

Sharing

General

Target

d6e926d73e8e1ed398255ff787781d3c
Size

21KB
MD5

d6e926d73e8e1ed398255ff787781d3c
SHA1

daff08a7d3a65b360094637a0d2676ca365f776a
SHA256

f60f7ca58b1df7d891db85fc972e04c79b16c15e798a03a93d11a9ee721e1340
SHA512

fe52802249c210a144aad311557de56fb8ff35b2d5d20fe671ce3da726689a1f5d46248d1e9a3b33d6470acbac4fffeb72f24791139c45eae7103086fb340d52
SSDEEP

384:2Mqsu/4aJG2grXa2ksPkllL0knttTjNSR+tuAkI77A:C/01KtTEwJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6e926d73e8e1ed398255ff787781d3c

Files

d6e926d73e8e1ed398255ff787781d3c
.exe windows:4 windows x86 arch:x86

37864467a36d50fb91fb94ca0b7c38c6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
CopyFileW
CreateThread
DefineDosDeviceW
EnumResourceTypesW
GetCommConfig
GetConsoleWindow
GetDateFormatW

msvcrt

_mbccpy
_mbctombb
_mbsdec
_pctype
_snprintf
_snwprintf

shell32

SHLoadOLE
StrStrIA
DuplicateIcon

Sections

.text
Size: 11KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE