600b8d441939ee3c43d76f224d36e21c8816cd89c0c4bb8caba6eca556c97747N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

600b8d441939ee3c43d76f224d36e21c8816cd89c0c4bb8caba6eca556c97747N
Size

2.0MB
MD5

271714311977fe645593427185071140
SHA1

2c79d64341e0e5df54504cb11a03b9e1b116a71b
SHA256

600b8d441939ee3c43d76f224d36e21c8816cd89c0c4bb8caba6eca556c97747
SHA512

c346fb4d7a1ea36345f508a3c22a18f1c2204a6ce42a985b0a87c95ccdf192d65de4665ef709f60267146b24f6a5aa54d8d0806065384525bb2171c5a08d72a1
SSDEEP

24576:x4PnL8il7gorl0jQOqxUL7u0PL+P6GDgDvUUX4zzxE8k9+8HL7XWPULJJCXeBA:KD88g+2qxU3NWFEVKwmF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
600b8d441939ee3c43d76f224d36e21c8816cd89c0c4bb8caba6eca556c97747N

Files

600b8d441939ee3c43d76f224d36e21c8816cd89c0c4bb8caba6eca556c97747N
.exe windows:4 windows

84501a473a93366536b3bf1d606b5470

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineW
VirtualAlloc

user32

GetClipboardViewer

Sections

.text
Size: 672KB - Virtual size: 672KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE