c6427d701ad4fcd6f44af779049896013dddb3e565ea7b0b235e9bb4a9ad14d6 | Triage

Sharing

General

Target

c6427d701ad4fcd6f44af779049896013dddb3e565ea7b0b235e9bb4a9ad14d6
Size

32KB
MD5

f6032b7771f3c38baa261aa7209f2e70
SHA1

8da1d83c76a9e8785ed6daa21fec7d4a68451bc9
SHA256

c6427d701ad4fcd6f44af779049896013dddb3e565ea7b0b235e9bb4a9ad14d6
SHA512

82d39bd4315088f99a4c7e33d7b9b3e260ee18c524817dfd4b7a81628a042c6fe25cdc3985ab5e0b7c9050633f3fd42ea17742fc5537fe9345fa13117fc4fa81
SSDEEP

384:b93OOkVS0bfCXK1wMv4fCzk/mpoq0hXDM:bAjTfCaAuk/mO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c6427d701ad4fcd6f44af779049896013dddb3e565ea7b0b235e9bb4a9ad14d6

Files

c6427d701ad4fcd6f44af779049896013dddb3e565ea7b0b235e9bb4a9ad14d6
.dll windows:4 windows x86 arch:x86

c06eb88ca146c70c613229be1f36a548

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

OpenProcess
WriteProcessMemory
CloseHandle
VirtualQueryEx
ReadProcessMemory
GetCurrentProcess
LocalAlloc
LocalFree
GetProcessHeap
GetModuleHandleA
ExitProcess
HeapAlloc
HeapReAlloc
HeapFree
IsBadReadPtr
FreeLibrary
GetProcAddress
LoadLibraryA
LCMapStringA

msvcrt

sprintf
atoi
_ftol
strtod
strchr
free
malloc
strstr

user32

wsprintfA
MessageBoxA

oleaut32

VariantTimeToSystemTime

Exports

Exports

BypassVersionLimit

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 656B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ