6f926d99e5111dc40b176e3a0f39b0b413debd7d38c49fe71277a6fe21640a16N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6f926d99e5111dc40b176e3a0f39b0b413debd7d38c49fe71277a6fe21640a16N
Size

170KB
MD5

2396b1110352096eea892ce0eb4b32e0
SHA1

94a3e768df8c14ce0eba40e36238d92b006b9172
SHA256

6f926d99e5111dc40b176e3a0f39b0b413debd7d38c49fe71277a6fe21640a16
SHA512

4c4c473578a88af15975f8e30fbe2357f1ed346fc441d007cb11b08915abdbf6c1759745ef2e40199eaa4f0697d39379afca32da40cf17624b9e7c9a8eedd82f
SSDEEP

3072:wDTQGUHkkPkIyh7+ECwsIgH0xpnFmaDJUGMu5pV8W6NwMiS50bNas4j:CdUUi/wpgHyMu55of50or

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f926d99e5111dc40b176e3a0f39b0b413debd7d38c49fe71277a6fe21640a16N

Files

6f926d99e5111dc40b176e3a0f39b0b413debd7d38c49fe71277a6fe21640a16N
.exe windows:4 windows x86 arch:x86

58186114fc2f437eaf5104a754d869a2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress
GetACP
VirtualAlloc
GetCurrentThread
GetOEMCP

user32

LoadCursorA
LoadCursorW
IsWindow
GetParent
GetDlgItem
EndDialog
MessageBoxW
PostMessageW
SetWindowLongW
SystemParametersInfoW
GetDC
ReleaseDC
SendMessageW
EnumWindows
GetSystemMetrics
SetForegroundWindow

advapi32

RegOpenKeyA

Sections

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ggg22
Size: 165KB - Virtual size: 164KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ