6bea5f724b16c236fc9071804189ddcd94ff0ff3767bd96ea689bbb0db2a958f | Triage

Sharing

General

Target

6bea5f724b16c236fc9071804189ddcd94ff0ff3767bd96ea689bbb0db2a958f
Size

27KB
MD5

9f336b1d6d9490b9cdfce01aa0a96c0f
SHA1

4836e208167bd053c0c5db8b0eea763cb1e45710
SHA256

6bea5f724b16c236fc9071804189ddcd94ff0ff3767bd96ea689bbb0db2a958f
SHA512

33cb359ab6c5b65075807ca4d13c112623b9f7c3b9f426f0f8218f0c56c992e2d2c18d78c1f27a1060f38dc41e827b46b9c161f35acc0183052f32a41784b568
SSDEEP

384:6o7fwUYLh2QbVXn8LmA43/29aSJG7GgawGW5IYheQ:DkLNbcnraSotsWDYQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6bea5f724b16c236fc9071804189ddcd94ff0ff3767bd96ea689bbb0db2a958f

Files

6bea5f724b16c236fc9071804189ddcd94ff0ff3767bd96ea689bbb0db2a958f
.exe windows:5 windows x86 arch:x86

4af6f93514453d567bd86383ce4074b4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

PostQuitMessage
GetMessageA
DispatchMessageA
TranslateMessage
CreateWindowExA
RegisterClassExA
DefWindowProcA
SendMessageA
SetWindowTextA
GetActiveWindow
TrackPopupMenu

kernel32

HeapAlloc
GetProcessHeap
LoadLibraryW
GetModuleHandleA
CloseHandle
GetCurrentThreadId

comctl32

ImageList_Add
ord17
ImageList_Create
ImageList_Destroy
ImageList_AddMasked

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ