f6209c182dc9ee7c95988522f82b67df6bc98f61373e41be1e2ce244e26ea72a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f6209c182dc9ee7c95988522f82b67df6bc98f61373e41be1e2ce244e26ea72a
Size

6KB
MD5

6c90e6dd1a06a7dfa7c19b14c4448a0c
SHA1

cc81011c278d6bff8a2c3d00fdf2e1a6daf405d0
SHA256

f6209c182dc9ee7c95988522f82b67df6bc98f61373e41be1e2ce244e26ea72a
SHA512

e2eafac9b88b98cb43c1db6d8bd8bd8a36affac6dc6e73fa89cb5c4c2b82cf37ec3c3cb7bcab5600394f73b847ddf2f1a5fe13b71cc9bf966178fde4a41af57d
SSDEEP

48:SDbt0S4FVgCp471Ib4Fc/38+N7DYocHa23WlTpebVetFygFI5a2oxdVoZiG/9uDd:O0mIGnFc/38+N4ZHJWSY9FI5Wqjx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f6209c182dc9ee7c95988522f82b67df6bc98f61373e41be1e2ce244e26ea72a

Files

f6209c182dc9ee7c95988522f82b67df6bc98f61373e41be1e2ce244e26ea72a
.exe windows:5 windows x64 arch:x64

7c5f9b19847a4e36080308f0e2c5add5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

VirtualAlloc
GetModuleHandleA
GetProcAddress
VirtualAllocEx
WriteProcessMemory
CreateRemoteThread
CloseHandle
VirtualFree
GetProcessHeap
CreateFileMappingW
MapViewOfFile
OpenProcess
UnmapViewOfFile
GetCurrentProcess
TerminateProcess
HeapAlloc
HeapFree

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 790B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ