6f90448948173daeff012b3a0b1fae40N | Triage

Sharing

General

Target

6f90448948173daeff012b3a0b1fae40N
Size

9.9MB
MD5

6f90448948173daeff012b3a0b1fae40
SHA1

0251ca8f9f0ae46b2d7e05bbf2589e02ba625c98
SHA256

7907b91848546b664bf2029fc46f9bf35f429019dd1189324b57a39bf826fc68
SHA512

314a1b33d8690263435f518b546abedcf3e4d5c854bee8006a5f0a530571b52c4c4ade06c3e74c7b1ef5286720b677bb9763090c858bb4dd6b28eee2324967e6
SSDEEP

98304:ENH57vTrdT25v0rw/kilZtuncGu/Vw0wen+:aHx1zG+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f90448948173daeff012b3a0b1fae40N

Files

6f90448948173daeff012b3a0b1fae40N
.exe windows:5 windows x86 arch:x86

9d1c12e9e1c99f995e005c588cd78e4e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA

gdi32

GetTextExtentPointA

msvcrt

__CxxFrameHandler

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

user32

IsWindow

advapi32

RegOpenKeyExA

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 888KB - Virtual size: 888KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ