6ed2c97640697183a31934bb16446123a9f019fd0c744fd1325f8e38195e3dc0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6ed2c97640697183a31934bb16446123a9f019fd0c744fd1325f8e38195e3dc0
Size

6KB
MD5

1f70d3393fdee7782d942fe3749facf8
SHA1

d83ef5501e4e0e1a3db281559c50e2f9114fe02d
SHA256

6ed2c97640697183a31934bb16446123a9f019fd0c744fd1325f8e38195e3dc0
SHA512

007f58b5f0f5d9ee28951c733f494cd74a267c032d28b47314ec9361e2532c7bef44d43478424d2444e3c2612e29f876cbb96ffdb62c1b036c462bd281aa578b
SSDEEP

48:Szbt0S4FVgCp471Ib4Fc/38+N7DYocHa23WlTpebVetFygFI5a2oxdVoZiG/9uDO:y0mIGnFc/38+N4ZHJWSY9FI5Wqsx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6ed2c97640697183a31934bb16446123a9f019fd0c744fd1325f8e38195e3dc0

Files

6ed2c97640697183a31934bb16446123a9f019fd0c744fd1325f8e38195e3dc0
.exe windows:5 windows x64

7c5f9b19847a4e36080308f0e2c5add5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

VirtualAlloc
GetModuleHandleA
GetProcAddress
VirtualAllocEx
WriteProcessMemory
CreateRemoteThread
CloseHandle
VirtualFree
GetProcessHeap
CreateFileMappingW
MapViewOfFile
OpenProcess
UnmapViewOfFile
GetCurrentProcess
TerminateProcess
HeapAlloc
HeapFree

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 790B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ