b6b0c336e1c7f544c5082398e69123dc779a68904185b193fc1559a60442fe99 | Triage

Sharing

General

Target

b6b0c336e1c7f544c5082398e69123dc779a68904185b193fc1559a60442fe99
Size

2.2MB
MD5

c437c3a6895637430dc201276f24f1b9
SHA1

9f5a48fcf89f97ac49e7f542a2c6b9404decef15
SHA256

b6b0c336e1c7f544c5082398e69123dc779a68904185b193fc1559a60442fe99
SHA512

d9513f1d47cec4deb0331388dca36295713896861e37483c6d928d43ae03c6315f61d0b01d4e5e9c5f7935a001645e961d7f61ea0bce5c4832dbbbe1cc2e8a76
SSDEEP

49152:JoGfwoGLacpDXTHLFwWLScqf78zKWxAgKYpag:bfwoG+cdvFJM7Ubafg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6b0c336e1c7f544c5082398e69123dc779a68904185b193fc1559a60442fe99

Files

b6b0c336e1c7f544c5082398e69123dc779a68904185b193fc1559a60442fe99
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 4KB - Virtual size: 1.2MB

IMAGE_SCN_MEM_READ

VProtect
Size: 616KB - Virtual size: 616KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

VProtect
Size: 1.6MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

VProtect
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_MEM_READ

VProtect
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_MEM_READ