b6c934fd0c4beac7e852de327e468dac842385c9564727bbfd58fb4c301832a2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b6c934fd0c4beac7e852de327e468dac842385c9564727bbfd58fb4c301832a2
Size

310KB
MD5

dd6f6bc9409f0f8a1831e83f3d50c374
SHA1

65dc865fc0a80d360082718dcc7dde3c650934d7
SHA256

b6c934fd0c4beac7e852de327e468dac842385c9564727bbfd58fb4c301832a2
SHA512

3517190b25dbab54caecea00123ea4ef529976628fd1d5b63064095b2c900690027d0c0cf012a4a30dfa34054ebabeb35e10a7e17fde5a0fbd49f401ade8ea25
SSDEEP

6144:gBpTG4BXpGV/5i0KwFEIw8LaggfR4IKqI1jgn+ICJ8QSoM:YTPGrC3DDIVgCJA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6c934fd0c4beac7e852de327e468dac842385c9564727bbfd58fb4c301832a2

Files

b6c934fd0c4beac7e852de327e468dac842385c9564727bbfd58fb4c301832a2
.exe windows:6 windows x86 arch:x86

8a08f05f951e29daf72a243fb2aa4e67

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CloseClipboard
GetClipboardData
GetDC
GetInputState
GetSystemMetrics
GetWindowLongW
OpenClipboard
ReleaseDC

kernel32

CopyFileW
ExitProcess
GetCommandLineW
GetCurrentProcessId
GetCurrentThreadId
GetLogicalDrives
GetSystemDirectoryW
GlobalLock
GlobalUnlock

ole32

CoCreateInstance
CoInitialize
CoInitializeSecurity
CoSetProxyBlanket
CoUninitialize

oleaut32

SysAllocString
SysFreeString
SysStringLen
VariantClear
VariantInit

gdi32

BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
DeleteDC
DeleteObject
GetCurrentObject
GetDIBits
GetObjectW
SelectObject
StretchBlt

Sections

.text
Size: 253KB - Virtual size: 252KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ