d6f7c2c036dea7bcee7294f8f7ac84af | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d6f7c2c036dea7bcee7294f8f7ac84af
Size

83KB
MD5

d6f7c2c036dea7bcee7294f8f7ac84af
SHA1

77909df3380afcb02d26d4b4a6b6629eb15bcbf4
SHA256

31c4a45d0d38bff21c04e954a10456568e612858f9366f476355091dc8220aa8
SHA512

7410561b82d61791f213b45aaa120b25f76dc4e1eef09ae36f0013ff1b1e3f09323549e9d23a36df4e0ad2d620bd31826a284910cc2dfa229e93f67c07fedd00
SSDEEP

1536:g0000Xj4kNZ+AUBq/nqwDpi5yj8m/wGCcDEJBppjVrs2ryrd1vUQuqwcizSkX:g0000zxNZ+AScpZW7xHs2quciu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6f7c2c036dea7bcee7294f8f7ac84af

Files

d6f7c2c036dea7bcee7294f8f7ac84af
.exe windows:4 windows x86 arch:x86

4c6c3110bacf8d1f044ac04813cd27a1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibraryAndExitThread
DeviceIoControl
CreateIoCompletionPort
FindFirstFileW
ReadConsoleOutputCharacterW
GetFullPathNameW
GetExpandedNameA
DeleteTimerQueue
IsBadStringPtrA
SetPriorityClass

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE