d6f30f585b8392bf50bee8fdaaf8e066 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d6f30f585b8392bf50bee8fdaaf8e066
Size

125KB
MD5

d6f30f585b8392bf50bee8fdaaf8e066
SHA1

0bfe1db0f3376069df64fa59e6576b4181db19ca
SHA256

2faeaa8f1fef63f6219b1b78f533f1c8635b992e072b77ea12dc914781915c7d
SHA512

0a73476211b5bc453fce4e293033574e67b6afe2ea0be8081a40bae53d6817d330ac956fe17a701da73ef368193756eb0426f73ffa1c3db6c0d59514714060ec
SSDEEP

3072:1BSoRmjHH9J1jcczOYcIfIh3Q0K6EKXqTZEXSSm15:1EoY9JaXqA3nqZECS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6f30f585b8392bf50bee8fdaaf8e066

Files

d6f30f585b8392bf50bee8fdaaf8e066
.exe windows:4 windows x86 arch:x86

87d5f5a72552adb9dd90128930c96a52

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateDirectoryW
DnsHostnameToComputerNameA
Thread32Next
Thread32First
ConnectNamedPipe

user32

OffsetRect
ScrollChildren
SetMenuItemInfoA
LoadKeyboardLayoutEx
EnableScrollBar

Sections

CODE
Size: 15KB - Virtual size: 205KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 107KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pack32
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ