6948af744856da9e02e84f76f42ed88752e1ae82fa6d0ed7ff5435b1d012b842 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6948af744856da9e02e84f76f42ed88752e1ae82fa6d0ed7ff5435b1d012b842
Size

3.1MB
MD5

960cb44da2d52d5711900d2430ed4ec0
SHA1

afc9d018122227393fea64be452aa3a3d8a29ce1
SHA256

6948af744856da9e02e84f76f42ed88752e1ae82fa6d0ed7ff5435b1d012b842
SHA512

ef3c6c31479b491d6fd23decc482dc9592ba2328792815302c788fff97cd33e4a60dccb82e1a5f7229b8819c4bbe80bd1811790d24c545ff95865b40f0a2c373
SSDEEP

49152:H7TvfU+8X9GrNOsva5RbKhF3ANkTTlJ0YyB7nc0jylWwgWmkcnnEh6:c+8X9G3vP3AMUpolWwNmkFh6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6948af744856da9e02e84f76f42ed88752e1ae82fa6d0ed7ff5435b1d012b842

Files

6948af744856da9e02e84f76f42ed88752e1ae82fa6d0ed7ff5435b1d012b842
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 994KB - Virtual size: 994KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 147KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 386KB - Virtual size: 385KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ