6e14ddb3880e6d7d0fb13497ae54bd597ccb9d9ac9948d9b38bf384291a0fb9bN | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6e14ddb3880e6d7d0fb13497ae54bd597ccb9d9ac9948d9b38bf384291a0fb9bN
Size

7KB
MD5

0111bedbc766bfc8e460a9dac00a90e0
SHA1

56c7b116e84761a527f2f19bcd016aaaa5ed7ff9
SHA256

6e14ddb3880e6d7d0fb13497ae54bd597ccb9d9ac9948d9b38bf384291a0fb9b
SHA512

9011b8cc79684aab063a75f86c81b1558e2ebaed5b302fda63e774001f97b4f10c27028ef142c9fe764da565fd922be981a0a81a2bb8674fa4911aab680d0573
SSDEEP

48:6sEyIw8SmcdRHGo4JVa4qJs/506Zma8a3MmKNe8Ld/eDhgCGIcP2WOqMBq:/S4+JAbY0G8HvRahgCncP3OqMQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6e14ddb3880e6d7d0fb13497ae54bd597ccb9d9ac9948d9b38bf384291a0fb9bN

Files

6e14ddb3880e6d7d0fb13497ae54bd597ccb9d9ac9948d9b38bf384291a0fb9bN
.exe windows:4 windows x86 arch:x86

f601d5b658aa25158008ed24e24e78d2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetActiveWindow
MessageBoxA
EnableWindow

kernel32

ExitProcess
SleepEx
Sleep
QueueUserAPC
CreateThread
GetLastError

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 320B - Virtual size: 302B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ