6d6dcda5e68252e8ae245965e3cc1e0fdf6f666a957dee66ad504ff0b466bdbb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6d6dcda5e68252e8ae245965e3cc1e0fdf6f666a957dee66ad504ff0b466bdbb
Size

62KB
MD5

d783541762ebde0ff3a0911fa06439d4
SHA1

a340ac816c2872fdea29724e81c8d46199b8abd5
SHA256

6d6dcda5e68252e8ae245965e3cc1e0fdf6f666a957dee66ad504ff0b466bdbb
SHA512

5540989eca5fe9528798384bb0618b071ee60f95f53e99f6ca04c3aeb2f765286ef53b9043a6b5cc95d4a66655a11ee4419f9c1da17ea0f97118f7287ae13118
SSDEEP

1536:I9g9tzNGkqZ9xyfIr5Cyzt17kkT8m8GF1DwsBF1q0n4S/scZcdi:R9GkqtyfI0yz9xbJBjL4S/sc/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6d6dcda5e68252e8ae245965e3cc1e0fdf6f666a957dee66ad504ff0b466bdbb

Files

6d6dcda5e68252e8ae245965e3cc1e0fdf6f666a957dee66ad504ff0b466bdbb
.exe windows:4 windows x86 arch:x86

0f6fbe81eb76d0172abdc3d6469c5658

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleAliasA
CompareFileTime
CreateDirectoryTransactedW
GetCurrentProcessId
SetFileAttributesA
RegisterWaitForSingleObject
FillConsoleOutputCharacterW
InterlockedCompareExchange
GetDateFormatWWorker

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE