6ac923c946fa519cf04d2bcc2fc6c01f7ef045652c5f4922f1c681f218294078N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6ac923c946fa519cf04d2bcc2fc6c01f7ef045652c5f4922f1c681f218294078N
Size

56KB
MD5

0a8bd08a2740abff2470e1841378c570
SHA1

19deb59c5a73bfc242194583aa54f810f12368c3
SHA256

6ac923c946fa519cf04d2bcc2fc6c01f7ef045652c5f4922f1c681f218294078
SHA512

c0b006d1de05d859a6ca0236c3da6182d0cc2e205056739edb9752297234ebb9b93e812cb022cf74337da09225460f5345364812ac8337104a37d21f044814d0
SSDEEP

768:2PitRNEGtXXnZ/JudBDtcUtdVCxVOS3fNGqSatlAkpZz:RF3wDtkx3PRVZz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6ac923c946fa519cf04d2bcc2fc6c01f7ef045652c5f4922f1c681f218294078N

Files

6ac923c946fa519cf04d2bcc2fc6c01f7ef045652c5f4922f1c681f218294078N
.exe windows:5 windows x86 arch:x86

32ea2988a92c31a9efd5b936dc243a44

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

cabinet

ord13

mscms

GetColorDirectoryW

kernel32

GetLastError
ExitProcess
GetModuleHandleW

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ