a6fd94a202c16625dcfd9207228f9f13b396b5b007cd7a0da802eb762d7a0293 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a6fd94a202c16625dcfd9207228f9f13b396b5b007cd7a0da802eb762d7a0293
Size

37KB
MD5

b3f0822691e666ef1c25d75f86594ab9
SHA1

6e0cf5b185214fca1d8c11ec7b5510ed74eecd1e
SHA256

a6fd94a202c16625dcfd9207228f9f13b396b5b007cd7a0da802eb762d7a0293
SHA512

99497c76041e995c91d1e9d3d1586bc6699cb3fdb672b2d078d4d65fac3b4a358c2415f2048a7bde12e22a46aab4998ee672e8a5412fbb3464e3e74b07500ceb
SSDEEP

384:IbRmmOIt0K/vDxbwpgDi7ZtCtY8alJZjLzu0h9kxCyLc/ErLBoMSnUhak:IbRmUvDX23RZjLsCyLc/munUt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a6fd94a202c16625dcfd9207228f9f13b396b5b007cd7a0da802eb762d7a0293

Files

a6fd94a202c16625dcfd9207228f9f13b396b5b007cd7a0da802eb762d7a0293
.exe windows:5 windows x86 arch:x86

c07ef8bdf88571f34b5a5b7df7a82509

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MoveWindow
GetMessageW
TranslateMessage
DispatchMessageW
SendMessageW
DefWindowProcW
CreateWindowExW
EndPaint
GetClientRect
PostQuitMessage
ShowWindow
UpdateWindow
RegisterClassExW
ReleaseDC
GetDC
BeginPaint
DrawTextExW

kernel32

CreateFileW
GetModuleHandleW

gdi32

GetStockObject

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ