6da52e6aebc4a54972d8c3893ae6d3f11c098c28e8532d89293e807e6c33cb3a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6da52e6aebc4a54972d8c3893ae6d3f11c098c28e8532d89293e807e6c33cb3a
Size

470KB
MD5

8a6a51487f4306b684f89e4aaa54f06f
SHA1

f0e79b2c9961c8dc6f917c0e8a589181d13392b8
SHA256

6da52e6aebc4a54972d8c3893ae6d3f11c098c28e8532d89293e807e6c33cb3a
SHA512

9441af2a51a7c61eff23c7b6b947a311e5dba2224ad2c4319d0183fd3d216969f61c414fc3650d4d0ed9935e0f71affe6e6191571ce105a54c9180d1ef654d1c
SSDEEP

12288:IUqqXVLh+dmEipmVVdVhZsHlUeCTA56HBrGdw+zeATBb:I2VLWmEip4EwTA8rFceATBb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6da52e6aebc4a54972d8c3893ae6d3f11c098c28e8532d89293e807e6c33cb3a

Files

6da52e6aebc4a54972d8c3893ae6d3f11c098c28e8532d89293e807e6c33cb3a
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 218KB - Virtual size: 464KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 59KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 9KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.4MB - Virtual size: 5.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 14KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE