6b02b4b0d0065b40e3984eb9365488a2ffefbca1966870cd36d4333592381497N | Triage

Sharing

General

Target

6b02b4b0d0065b40e3984eb9365488a2ffefbca1966870cd36d4333592381497N
Size

2.0MB
MD5

7d0e1beb572abc232c05268a33ad0280
SHA1

3b4f333db993ca7b4e2f3fc2f11ccd763304ed6d
SHA256

6b02b4b0d0065b40e3984eb9365488a2ffefbca1966870cd36d4333592381497
SHA512

e90aa1833349c0c2cf8e783c932662c061f7c7135139780f2f7ce3bc48231a14247bdf592151828360003f571e4483dcc01bb9d28dfc25a0714443e83942fcfb
SSDEEP

49152:qN1CuQhHQXyF0AMkaPleHLQstr7ZT1Ca:ACuSHQC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6b02b4b0d0065b40e3984eb9365488a2ffefbca1966870cd36d4333592381497N

Files

6b02b4b0d0065b40e3984eb9365488a2ffefbca1966870cd36d4333592381497N
.exe windows:4 windows

8220ff9bdb3743164ba7da1a40832639

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetCurrentProcessId
GetProcessHeap

user32

GetOpenClipboardWindow

Sections

.text
Size: 672KB - Virtual size: 672KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE