6b76129be846c05f44a4838268e3447f778031fa7a900e96379e1042cbde8325 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6b76129be846c05f44a4838268e3447f778031fa7a900e96379e1042cbde8325
Size

1.4MB
MD5

375ad715e9f6c9b9f998a14ecd369242
SHA1

6c62f572726e079180e28720031be6c3d14cd0f6
SHA256

6b76129be846c05f44a4838268e3447f778031fa7a900e96379e1042cbde8325
SHA512

5c0f22e7924e59d2cb380bd336c78f29edc9da6c2bd4e7f2e47190234256a7c517a93395046a5f09e2c8d6b9f12fc7e3c01cf12ecaede71280a067f6e2b8a668
SSDEEP

24576:dRIOeMxuRrt7jQExHSWKAsaKNTqUnmQD8ixO:5Ct7p97tQD8i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6b76129be846c05f44a4838268e3447f778031fa7a900e96379e1042cbde8325

Files

6b76129be846c05f44a4838268e3447f778031fa7a900e96379e1042cbde8325
.exe windows:4 windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ