6496366ccc6f09629d00d06cf0edd1490aa311dbccdf1873ac2ce5c09cbbc650 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6496366ccc6f09629d00d06cf0edd1490aa311dbccdf1873ac2ce5c09cbbc650
Size

77KB
MD5

b992c3e9a004581553ac28702af19674
SHA1

fb5d714d255335e9a6b88f294791423e779990bd
SHA256

6496366ccc6f09629d00d06cf0edd1490aa311dbccdf1873ac2ce5c09cbbc650
SHA512

f31a3602d51a3cd3af20fffcf86cace2b100575299ccbd020130ccd53c048448d24133c632f1843479ace83049e997dad2432044095968f68f20ad0fd577f72d
SSDEEP

768:YLonByjugARIqN7JD3iQ3LJHhhKEnHqYU420d8fI7GY9ejXCgMFDT/:YIHgQIqNVx3LJjn351ecGY4jnMFn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6496366ccc6f09629d00d06cf0edd1490aa311dbccdf1873ac2ce5c09cbbc650

Files

6496366ccc6f09629d00d06cf0edd1490aa311dbccdf1873ac2ce5c09cbbc650
.exe windows:5 windows x86 arch:x86

a624b58551b12248f78b62ae51484114

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ShowWindow
PostQuitMessage
DefWindowProcW
DispatchMessageW
TranslateMessage
GetMessageW
CreateWindowExW
RegisterClassExW
UpdateWindow
PostMessageA

kernel32

FindClose
DeleteFileW
CreateFileW
SetFilePointer
ReadFile
GetSystemTime
GetModuleHandleW

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ