f6c053d8d61f2b67c116ceb96724a667440464cc564068776cf8cfd4b73c39c8 | Triage

Sharing

General

Target

f6c053d8d61f2b67c116ceb96724a667440464cc564068776cf8cfd4b73c39c8
Size

2.1MB
MD5

c19539600ebf2db5e6c737f54947aed6
SHA1

50ab2dac58f9465764044025bafc0e80efda4560
SHA256

f6c053d8d61f2b67c116ceb96724a667440464cc564068776cf8cfd4b73c39c8
SHA512

9787796350419ca30cc71d35901f2534fe0c86fd35891bf2443881cd898032d8e9fecce81039e7b0b0183d4c8895ff0b0f5796977996df0f13692c04b73734f1
SSDEEP

49152:YbYmmWlcWA2+SWwcCGLqROj1fZ6ejfbIQ9JuI8ig7l21O:6mYcWAUWzCqM68ejbx9o1zl2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs
Checks for missing Authenticode signature.

Processes:

resource

f6c053d8d61f2b67c116ceb96724a667440464cc564068776cf8cfd4b73c39c8

Files

f6c053d8d61f2b67c116ceb96724a667440464cc564068776cf8cfd4b73c39c8
.exe windows:4 windows x64 arch:x64

02549ff92b49cce693542fc9afb10102

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvcrt

malloc
memset
_get_pgmptr
getenv
sprintf
__argc
__argv
_environ
_XcptFilter
__set_app_type
_controlfp
__getmainargs
exit

kernel32

Sleep
CreateProcessA
SetUnhandledExceptionFilter

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ