6974ae893120e489a0c149772131be993ee2129e947fdee9c037e48ff3276a4b | Triage

Sharing

General

Target

6974ae893120e489a0c149772131be993ee2129e947fdee9c037e48ff3276a4b
Size

2.9MB
MD5

30690e0b52c75f63de93d2d5c14901eb
SHA1

c56d82824164c38b71f9255284c2559d1f1f5914
SHA256

6974ae893120e489a0c149772131be993ee2129e947fdee9c037e48ff3276a4b
SHA512

44cb024da67e6e820edd43566679b38ba1bf5328022f93fa64d3132052ef31d0cac5199c535cb335145746b921720ffe05dd2f585449ad63838c2184058bd151
SSDEEP

49152:H7TvfU+8X9GrNOsva5RbKhF3ANkTTl52iPoi/k/fFcrW+ji:c+8X9G3vP3AMf2iX/c9crW7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6974ae893120e489a0c149772131be993ee2129e947fdee9c037e48ff3276a4b

Files

6974ae893120e489a0c149772131be993ee2129e947fdee9c037e48ff3276a4b
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 994KB - Virtual size: 994KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 147KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 386KB - Virtual size: 385KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ