6fedfc8d7deb47220f826cfd47f22284060dad4d430c2ea8c9b98335a51de09eN | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6fedfc8d7deb47220f826cfd47f22284060dad4d430c2ea8c9b98335a51de09eN
Size

2.0MB
MD5

1ff61d6be8ffdef1aae5f3da6a69e1e0
SHA1

342e097bc6481c6143cfb918874eaf921da5e3a6
SHA256

6fedfc8d7deb47220f826cfd47f22284060dad4d430c2ea8c9b98335a51de09e
SHA512

aac67192ddcda0d4bb3d9486432d61c52518f7db708133e786226b2c62cf96731666884d355a17e2db575c05254b184b51d7edd3c16b3665c1992e177f9f886f
SSDEEP

49152:qHqRv5cJD8b0kpxPfO+UO1s5TJynvoRRp:sqBcJD8gkpdfO+UO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6fedfc8d7deb47220f826cfd47f22284060dad4d430c2ea8c9b98335a51de09eN

Files

6fedfc8d7deb47220f826cfd47f22284060dad4d430c2ea8c9b98335a51de09eN
.exe windows:4 windows

b3e903feedccb9a27fad0bb1d48f9828

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetUserDefaultLangID
VirtualAlloc

user32

GetCursor

Sections

.text
Size: 676KB - Virtual size: 676KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE