6942660ce103881e05a93b060f8db9758949f324df857d7927e4b85ff050d70b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6942660ce103881e05a93b060f8db9758949f324df857d7927e4b85ff050d70b
Size

5.0MB
MD5

cebf6cbb2ca9b130af22ee7f7a8bf8a2
SHA1

6a07a114c6b1dedce320e0f2502df8203efe7efb
SHA256

6942660ce103881e05a93b060f8db9758949f324df857d7927e4b85ff050d70b
SHA512

44dfd7d08c6d2b8f20a0e15dd143858199c0e4329e4337573b3f5c120ca2cbd48da663966f9d78fe87eef3d2cd275f96acc969e7ac70f37f6f19993a19504592
SSDEEP

98304:YZT3WGVg5+YldbbsymnC3GIxgfET5rLmuDz05DWJnWXq3dYr:O3VgjFbsxC3GIafEVrLmuDz05S5q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6942660ce103881e05a93b060f8db9758949f324df857d7927e4b85ff050d70b

Files

6942660ce103881e05a93b060f8db9758949f324df857d7927e4b85ff050d70b
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 752KB - Virtual size: 752KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 204KB - Virtual size: 204KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

lswang
Size: 615KB - Virtual size: 616KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

lswang
Size: 764KB - Virtual size: 912KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

lswang
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ