6ffd4c22cc18fd8f14ff4886719ddf6dad0737cd4f81302cee0850bf7a67dbb8 | Triage

Sharing

General

Target

6ffd4c22cc18fd8f14ff4886719ddf6dad0737cd4f81302cee0850bf7a67dbb8
Size

1.9MB
MD5

70ae9ff5eda55fe0f6e4d07974dce06d
SHA1

a843cf88a808e2008c5f4f9f5b30a399fe3cec9f
SHA256

6ffd4c22cc18fd8f14ff4886719ddf6dad0737cd4f81302cee0850bf7a67dbb8
SHA512

462790a514e4fb01dcbb5f4179d391bd63750f044b66fe4ba63a58dd17feb016960fa56c77b95e280a7f8524888a26d6ec45b1ae008ab5215de22e0c445141ba
SSDEEP

49152:xrr6L8LfRJPFmsmY/4aaJciuS77YYtQ8RfvoV:xf6L8L5JPFcY/4aUce7XjQV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6ffd4c22cc18fd8f14ff4886719ddf6dad0737cd4f81302cee0850bf7a67dbb8

Files

6ffd4c22cc18fd8f14ff4886719ddf6dad0737cd4f81302cee0850bf7a67dbb8
.exe windows:6 windows x64 arch:x64

ee93ddebbf5258fb8be12e5333dca258

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

WriteFile

iphlpapi

GetInterfaceInfo

msvcrt

_wcsnicmp

psapi

GetMappedFileNameW

user32

GetWindow

advapi32

RegSetValueExA

shell32

SHGetFolderPathW

Sections

.text
Size: 601KB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ