6b65b4e7a6b3c38d72ff68e8652d5cb5216857e4523dffdea201391419ac4e0f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6b65b4e7a6b3c38d72ff68e8652d5cb5216857e4523dffdea201391419ac4e0f
Size

3.8MB
MD5

134b3bd6a6a5440f2e1c961b5f509158
SHA1

1ad6f3cce8d94b5032750408ffe038501298dcf3
SHA256

6b65b4e7a6b3c38d72ff68e8652d5cb5216857e4523dffdea201391419ac4e0f
SHA512

3bd59edc0a477e93320d2c2b562853e46154eb21ceb100656735e21a0108f940bdd00f0d8fa07f6d5e5869bf011a35769d835dde6764466f6fc79b6998f44607
SSDEEP

98304:/Z5YVI0ySeL2u/oUaDAmEth7PFWK1dHk/PRbw7hv4:/ZemrLvou7PoK1dExbShv4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6b65b4e7a6b3c38d72ff68e8652d5cb5216857e4523dffdea201391419ac4e0f

Files

6b65b4e7a6b3c38d72ff68e8652d5cb5216857e4523dffdea201391419ac4e0f
.exe windows:4 windows x86 arch:x86

b1a3190e01af09bdcef56890b9c97f7c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

midiOutReset

ws2_32

htons

kernel32

GetWindowsDirectoryA

user32

CopyRect

gdi32

GetViewportExtEx

winspool.drv

OpenPrinterA

advapi32

RegOpenKeyExA

shell32

Shell_NotifyIconA

ole32

CLSIDFromProgID

oleaut32

UnRegisterTypeLi

comctl32

ord17

comdlg32

ChooseColorA

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

Sections

.text
Size: 2.8MB - Virtual size: 5.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 1016KB - Virtual size: 1016KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ