ira6[.]exe[.]1 | Triage

Sharing

General

Target

ira6.exe.1
Size

7KB
MD5

ac38df03393381d4feb5591e6ef20533
SHA1

32e23b4d66835573f7efe243d3cac621ed3b7359
SHA256

a607d0981715f6cb2a348163793e2e237edbbfea2d37126ebaf05dc98aa6ae5a
SHA512

282b376bc238784ce013a7c13376202ad59feac2d6875ec7a9db515cc1bc934e5fe83bc1c090959383c40aa32a54552f76ebb6925b555d680f6422ad66827e1c
SSDEEP

24:eFGStrJ9u0/6ZvnZdEBQAVl7J4gl2vJUeqyetl3xwJElHe9L8LmOPpmB:is0ILEBQAqg0s3xJe9sr8B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ira6.exe.1

Files

ira6.exe.1
.exe windows x64

b4c6fff030479aa3b12625be67bf4914

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

VirtualAlloc
ExitProcess

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.msnx
Size: 1024B - Virtual size: 680B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE