6f1d1a7523041d9dbb092231eba65f3c78fe925937fbff1cb7f27fa0217366b6 | Triage

Sharing

General

Target

6f1d1a7523041d9dbb092231eba65f3c78fe925937fbff1cb7f27fa0217366b6
Size

10KB
MD5

b33ee33543e6f52d25c40ddd211d5f0b
SHA1

e5da36a83ab60b171439f8c76fb5c4a269d70608
SHA256

6f1d1a7523041d9dbb092231eba65f3c78fe925937fbff1cb7f27fa0217366b6
SHA512

dc81fdb8a25be7ab61baab04d6de3d1bf26aae1667722b9b5643bb68ba2a8ead37b5a6f8ca9fdd0950b050794fdc6fd794320e7765f82a98e48059eaa670de9d
SSDEEP

192:sePbD1c81cvdiM5LA7a3XF6cmj6xi8mj7Tf4:NPbD1c7oSRUj6xi8mj7M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f1d1a7523041d9dbb092231eba65f3c78fe925937fbff1cb7f27fa0217366b6

Files

6f1d1a7523041d9dbb092231eba65f3c78fe925937fbff1cb7f27fa0217366b6
.exe windows:6 windows x64 arch:x64

bd5ee4a804291ba7d947fe2e622d1f0e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\assemblage_aaai_code\Builds\163581791297486506ebwscafogg\assemblage_outdir_bin\renderer.pdb

Imports

kernel32

ReadFile
GetFileSizeEx
VirtualFree
OutputDebugStringA
VirtualAlloc
CreateFileW
GetLastError
OutputDebugStringW
CloseHandle
ExitProcess
GetModuleHandleW

user32

PostQuitMessage
TranslateMessage
PeekMessageW
DispatchMessageW
ShowWindow
RegisterClassExW
CreateWindowExW
DestroyWindow
DefWindowProcW

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 264B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ