6452b1f858e88028f0a1c3ebd14c78f9a4df4aca1f7895d18afa94d81b9d742c | Triage

Sharing

General

Target

6452b1f858e88028f0a1c3ebd14c78f9a4df4aca1f7895d18afa94d81b9d742c
Size

2.9MB
MD5

44f0805c9185f4a11bbde32bc7bb1af6
SHA1

3a9f7b658be578b1e5c9957992e3fbb021f95dae
SHA256

6452b1f858e88028f0a1c3ebd14c78f9a4df4aca1f7895d18afa94d81b9d742c
SHA512

1b15ea8e4a1d83ff7a58498701c5f8a60abcad609788e62b4b64f02e6cd350adea160b4d7f94901424a2937fa8ed5b2cca126c3f4c9a11ab54593b7ad5fdd18f
SSDEEP

49152:/2L+m0HT1oQUssVBxDHDkrFSQLtvQB4y4pxGyJUb/TyeRj8DeD6NQZuSLl+uGQl:eSmWsbxDHgjL2BCnGyJ8Tyed8SnUjBQl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6452b1f858e88028f0a1c3ebd14c78f9a4df4aca1f7895d18afa94d81b9d742c

Files

6452b1f858e88028f0a1c3ebd14c78f9a4df4aca1f7895d18afa94d81b9d742c
.exe windows:1 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ