6fbd78e8d2a919e5f0a857de4d61a78f8351c0c77057bbf1c3b4b23c2f67ac3f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6fbd78e8d2a919e5f0a857de4d61a78f8351c0c77057bbf1c3b4b23c2f67ac3f
Size

34KB
MD5

f9b15c7095fc013d727774fed4295ea6
SHA1

ba572e7905019d756bda7d118dff6db2850da883
SHA256

6fbd78e8d2a919e5f0a857de4d61a78f8351c0c77057bbf1c3b4b23c2f67ac3f
SHA512

dc186b8d1449c5b1960369ad601b5d3df234ed14d859995fd90262f16a8c8c34b224e3d9072076b5f659d9fb79d819790f33d2afcd23cc0a85d25a19818aa2b2
SSDEEP

768:/qPJtHA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKYfdhNhB:/qnA6C1VqaqhtgVRNToV7TtRu8rM0wYh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6fbd78e8d2a919e5f0a857de4d61a78f8351c0c77057bbf1c3b4b23c2f67ac3f

Files

6fbd78e8d2a919e5f0a857de4d61a78f8351c0c77057bbf1c3b4b23c2f67ac3f
.exe windows:4 windows x86 arch:x86

3b884b93be1eaa99038bd3acaaa5f577

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

GetFileSize
WaitForSingleObject
CreateThread
HeapFree
DeleteFileA
ExitProcess
lstrcmpiA
lstrcatA
GetWindowsDirectoryA
HeapAlloc
GetProcessHeap
Sleep
GetModuleFileNameA
CloseHandle
GetLastError
CreateMutexA
HeapReAlloc
FindClose
FindFirstFileA
GetProcAddress
LoadLibraryA
CreateProcessA
CreateFileA
ReadFile
WriteFile
FlushFileBuffers

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetSetOptionExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE