6e4a2c1aa2c5bac6fded1ad20d2429b036a05d231291d609f86c0154eaa0b1b3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6e4a2c1aa2c5bac6fded1ad20d2429b036a05d231291d609f86c0154eaa0b1b3
Size

40KB
MD5

31151da3cf663b8a147e2c14e9c90b15
SHA1

a8411bdbcdd10748b413a082cce7cb4803bfd60f
SHA256

6e4a2c1aa2c5bac6fded1ad20d2429b036a05d231291d609f86c0154eaa0b1b3
SHA512

6835a194929f8c0c9de8c9610970d3290420683b04f38544d6701dc96c542e2525b4c49d83ba66f32203fef7683892f1c9724d1e0f496c612bf8d6196227bfd3
SSDEEP

768:NZZ5zjcbOa/DgGlXLkVf6AXeaIiZk0DyXvLh93NO/j6i5VzxtYcFx6K:B5XeqXejinDy/tEvzhxl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6e4a2c1aa2c5bac6fded1ad20d2429b036a05d231291d609f86c0154eaa0b1b3

Files

6e4a2c1aa2c5bac6fded1ad20d2429b036a05d231291d609f86c0154eaa0b1b3
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ