6Rq2jH2LqNWL4Ms[.]exe | Triage

Sharing

General

Target

6Rq2jH2LqNWL4Ms.exe
Size

953.7MB
MD5

d62b6cd8efefc35a296dce538406b0bc
SHA1

6eed2f5cfaa4be37f415ffc7e7ca0be3c8fa666b
SHA256

2c6806c595851c8586c1b1fd617422979732675a4ad0b383527909b839e58b66
SHA512

377526e54bc9c9290f8bafe4900b3afddd56b0b34360e50de885d297c2f425f01fd6d471f7151add0f36c64184725ec5d79956550a2ea21f5352ea2415f908fd
SSDEEP

12288:Tbp4GlTGNnvQvUGeNOcGeEEWygssurJ0w/xMQpEiR2qYt6:TV4CGOvUvNOcW1ssE0ExMQpEHr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6Rq2jH2LqNWL4Ms.exe

Files

6Rq2jH2LqNWL4Ms.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 574KB - Virtual size: 574KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ