6fd136bc81af5262f692a793bbbbfee5e971bcc0e99b6a813431e961241665db | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6fd136bc81af5262f692a793bbbbfee5e971bcc0e99b6a813431e961241665db
Size

12KB
MD5

26b25c3d33cc3415c4912c01cfca133e
SHA1

0c85da6917a838a4b176107023db99cbf9f0eb5a
SHA256

825a019e629edc8ecb9d4af7a633c707eca94450899d5e150e3c8482688be4a1
SHA512

7d67908ff2ea1b637b12938f985d1971a4b418a206ac9c56a2d61b675cd90431973fa46cdfb38285354816c1cf15c15c5669c9b66c3297779b2716f2d7127dbd
SSDEEP

384:flDeSZ/0pO014ds/zZtyX0ftU7rtWcqWAi:NKwdI3yUtIrtqe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/6fd136bc81af5262f692a793bbbbfee5e971bcc0e99b6a813431e961241665db

Files

6fd136bc81af5262f692a793bbbbfee5e971bcc0e99b6a813431e961241665db
.zip
6fd136bc81af5262f692a793bbbbfee5e971bcc0e99b6a813431e961241665db
.dll windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 866B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 128KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 196B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ