d6fb42e63f5997e34a3b2d389da1fb8e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d6fb42e63f5997e34a3b2d389da1fb8e
Size

228KB
MD5

d6fb42e63f5997e34a3b2d389da1fb8e
SHA1

258dfd4637fad222b51bb9738d16e70c2628d7eb
SHA256

817d7af0b8155b64ab84e859fd3ae44b7830ef3c8bf7ff5ad4e0c13041cd5ecd
SHA512

07faf5a6e4f24b404908fab3d6eb329fc40f285cfd0a18fd553042e843a52fe0a042f10f0fbb89cd1d3374250e3b31fa87a3b65bb4ebe50cc870b7fa75b896d8
SSDEEP

3072:YhKj0GQmsmi03MToi7OHc6fGcNWPK5SJolIhuj57uVG:2hki0TtfGiWPkA1hqJu4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6fb42e63f5997e34a3b2d389da1fb8e

Files

d6fb42e63f5997e34a3b2d389da1fb8e
.dll windows:5 windows x86 arch:x86

46268c82faf3dda7155542c9bb22a62c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExitProcess

advapi32

RegDeleteValueW

user32

CopyRect
GetWindowTextA

Sections

.blbb
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.mgne
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bohh
Size: 161KB - Virtual size: 448KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.lfcgb
Size: 512B - Virtual size: 280B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ