6af64ff7415b4e3c22f384596a43b1c73e16d4416bbcb0ae3759f634da9b7b28 | Triage

Sharing

General

Target

6af64ff7415b4e3c22f384596a43b1c73e16d4416bbcb0ae3759f634da9b7b28
Size

2.7MB
MD5

934eae31a727ec72c1d89b35c1dbf728
SHA1

e28216880e9ccff789c0597975c8262ccdd01cce
SHA256

6af64ff7415b4e3c22f384596a43b1c73e16d4416bbcb0ae3759f634da9b7b28
SHA512

2d76942606a26d9b2eb986878c27ca575c88df7468c46271ee1519c2e798eee9ae8b0ad6af3be171d8f655d54e54cb4ec2eae3104fccb11c2b81c24eb1f2bc8e
SSDEEP

49152:D7TvfU+8X9GrNOsva5RbKhF3ANkTTle0kDlQbWbpC4/oMk:Q+8X9G3vP3AMzCxltk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6af64ff7415b4e3c22f384596a43b1c73e16d4416bbcb0ae3759f634da9b7b28

Files

6af64ff7415b4e3c22f384596a43b1c73e16d4416bbcb0ae3759f634da9b7b28
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 994KB - Virtual size: 994KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 147KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 386KB - Virtual size: 385KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ