d6cf54b467f677ee95a413878b70e930N | Triage

Sharing

General

Target

d6cf54b467f677ee95a413878b70e930N
Size

190KB
MD5

d6cf54b467f677ee95a413878b70e930
SHA1

db16ba22c1db146d2fbc10c33ff8d719711e4de6
SHA256

e3d9778d7414dd17b0e4f872de8b5870b01132a83558f489a5f6558eaa478cd4
SHA512

f833751180bc910bd0a8799414f023cac223d19fe9cdf10a5d135d0bcfbc29a9328984c58a50a0cd47a332b9a86b64c5b4fb1a81ddf2ad37f34c01ff66af96c1
SSDEEP

3072:qRtVuTbJ0E0O3E2lBF3T60L0gJsCt/ehE7TPXgvhvXcsevfgZZXFkei:qRvuW2ZpFHeevPwpvcsem5Ri

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6cf54b467f677ee95a413878b70e930N

Files

d6cf54b467f677ee95a413878b70e930N
.exe windows:4 windows x86 arch:x86

f433e7fcc51e68080022754836705744

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree

user32

MessageBoxA

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

fzawvwl7
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

izwoltac
Size: 89KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

z.caw666
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ