6af62b63c2ba3c4fc4ab2dff084d94746f79f1d67aa003d8c367b761d70b4c5aN | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6af62b63c2ba3c4fc4ab2dff084d94746f79f1d67aa003d8c367b761d70b4c5aN
Size

2.0MB
MD5

500368e4f2b31a94b218273921d01c50
SHA1

f6a31de2558ed3562b5bc7d061db5c3fb0ef3141
SHA256

6af62b63c2ba3c4fc4ab2dff084d94746f79f1d67aa003d8c367b761d70b4c5a
SHA512

af5f71dd134c941f95c16736dce9267c59b825cbb52e328d1cf2a9581a929ac092c6d6f08d7a4adbd13dd8e5b9d0303f62554d787512d73b3e20229dd47fc555
SSDEEP

49152:TrMDyZrbLlY1cOYe4ErQVJ+1g8J17cl9RMmi:TbLlY1cG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6af62b63c2ba3c4fc4ab2dff084d94746f79f1d67aa003d8c367b761d70b4c5aN

Files

6af62b63c2ba3c4fc4ab2dff084d94746f79f1d67aa003d8c367b761d70b4c5aN
.exe windows:4 windows

77449f20b054c88032bad5e7ff103c52

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetUserDefaultLangID
VirtualAlloc

user32

GetProcessWindowStation
GetClipboardSequenceNumber

Sections

.text
Size: 672KB - Virtual size: 672KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE