6f70f4e84370031673af8e642dbc41df978e47005ce3a00a013a0dac861a4bb8N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6f70f4e84370031673af8e642dbc41df978e47005ce3a00a013a0dac861a4bb8N
Size

519KB
MD5

212aae6eb1b59d51026d53352b01d060
SHA1

f537afd9b6b08a75d1d91a09a0b4901d476d659d
SHA256

6f70f4e84370031673af8e642dbc41df978e47005ce3a00a013a0dac861a4bb8
SHA512

801afb59a7f989405d328b005b4356159458b8b0126ba468bd9b08d1b643cff6822aae3884aafa4f19be2283beeb89789a9e4547c3cd1337f3148ace9e576427
SSDEEP

3072:MKx4cP3FqT0BQKC+/10s+UHS2nlqgwoZJhHWUATkfHXVM+e3:8cP1Uk5/3HU5onBPlMj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f70f4e84370031673af8e642dbc41df978e47005ce3a00a013a0dac861a4bb8N

Files

6f70f4e84370031673af8e642dbc41df978e47005ce3a00a013a0dac861a4bb8N
.exe windows:1 windows x86 arch:x86

a110531a87e9a90a0f8653b00a50f512

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

VariantChangeTypeEx

gdi32

UnrealizeObject

ole32

IsEqualGUID

comctl32

ImageList_SetIconSize

shell32

ShellExecuteA

Sections

CODE
Size: 122KB - Virtual size: 360KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 396KB - Virtual size: 412KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE