6db6c0afc016e89e7f7e150d6bef7e353a218f2700504208a0d9b3287edab23b | Triage

Sharing

General

Target

6db6c0afc016e89e7f7e150d6bef7e353a218f2700504208a0d9b3287edab23b
Size

4.1MB
MD5

79f3651434ad858c50b99d9d02deb320
SHA1

8e8d2017a89cf262ea405c806102332e1cecf994
SHA256

6db6c0afc016e89e7f7e150d6bef7e353a218f2700504208a0d9b3287edab23b
SHA512

013e8ce830b20e8039ea7d5bd674ff7df8d2f62cff9abe102ebb511c447408625b87c1657a4be5e95386f76d817f47921aae6d769e76d3713852d210c1831ea8
SSDEEP

98304:/GxIzj4GHyrpR3frzj4j+zINT111Y111J111n:EEKL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6db6c0afc016e89e7f7e150d6bef7e353a218f2700504208a0d9b3287edab23b

Files

6db6c0afc016e89e7f7e150d6bef7e353a218f2700504208a0d9b3287edab23b
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 109KB - Virtual size: 109KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 411KB - Virtual size: 411KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ