6d00288af1f5356e6c7bcf2e730eefe65ab221e526ed0eb8c126374456bb2379 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6d00288af1f5356e6c7bcf2e730eefe65ab221e526ed0eb8c126374456bb2379
Size

798KB
MD5

b4ac567bebd6a5cdf6f5436ce33be2cc
SHA1

d91ff2038c18192957695a1325acda5f2d693fb0
SHA256

6d00288af1f5356e6c7bcf2e730eefe65ab221e526ed0eb8c126374456bb2379
SHA512

ab9066b4adc6c50459fbe90e264e35dfca101fd78d9dd10d10f246d0015c274bb980f5218675c214095aec4edc37f523eb57b70f69401df649f6aeeaf2cefac9
SSDEEP

24576:uBhSGN+F8GCRclCupxvo72UIQsXoeoHpE:0hi3wIToeoG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6d00288af1f5356e6c7bcf2e730eefe65ab221e526ed0eb8c126374456bb2379

Files

6d00288af1f5356e6c7bcf2e730eefe65ab221e526ed0eb8c126374456bb2379
.exe windows:4 windows x86 arch:x86

32c5de998b5f069b26c94c8143b13c06

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE

Imports

mscoree

_CorExeMain

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

kernel32

GetModuleFileNameW

user32

GetWindow

advapi32

RegDeleteKeyA

shell32

SHGetFolderPathW

Sections

.text
Size: 33KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 752KB - Virtual size: 752KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ