6957106145e489ea9e3c1613f0c78c1a4cec22e6cc62a2944e06e820e9dfcbc2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6957106145e489ea9e3c1613f0c78c1a4cec22e6cc62a2944e06e820e9dfcbc2
Size

47KB
MD5

eaaac8ced6f780723645a16e6b25ff9c
SHA1

f8c28cfa12047b5a07625d260290d2921b41477f
SHA256

6957106145e489ea9e3c1613f0c78c1a4cec22e6cc62a2944e06e820e9dfcbc2
SHA512

0907adc8d2a25fd41bc59c8d395d0803530cad0fa11e5a9b84457f6f95b8205b61f8a712fd4bddbcd41cdf6c2dd6d411b8391af115a74a0430e592bcc3519d8f
SSDEEP

768:Erz5eN6Z587mnaCJcZE7zIvBmQEL5mI38rQm5Qns:EReAYa/GZCzIN8mI38rQNns

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6957106145e489ea9e3c1613f0c78c1a4cec22e6cc62a2944e06e820e9dfcbc2

Files

6957106145e489ea9e3c1613f0c78c1a4cec22e6cc62a2944e06e820e9dfcbc2
.exe windows:4 windows x86 arch:x86

e95e3c19c1b1846eddfe9b97188d572c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
CreateProcessW
DeleteFileA
ExitProcess
GetCommandLineW
GetModuleFileNameA
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

ntdll

NtFlushInstructionCache
NtOpenKey
NtProtectVirtualMemory

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 732B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE