1c6f01ab7d930a8550c0fb1709c357cad5c5fde09e7bfad8185c0c5b6b8b4c29[.]x[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1c6f01ab7d930a8550c0fb1709c357cad5c5fde09e7bfad8185c0c5b6b8b4c29.x.exe
Size

1.2MB
MD5

1e089aae9e74bd7ad6d8314d89cbf0be
SHA1

a099302310a1fd7920787763e3122edcf216de32
SHA256

1c6f01ab7d930a8550c0fb1709c357cad5c5fde09e7bfad8185c0c5b6b8b4c29
SHA512

357533e0aa141a203cf22cc3a152823ec0c7ec0b6dd7f7bf12225ee6d139ad7f02c51bb69316d9f98f886dd12b5572dc6502864177aefafdd3aa85f3e1c7b439
SSDEEP

24576:LnsJ39LyjbJkQFMhmC+6GD91Inn1ETq//Mq:LnsHyjtk2MYC5GD0niW/0q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c6f01ab7d930a8550c0fb1709c357cad5c5fde09e7bfad8185c0c5b6b8b4c29.x.exe

Files

1c6f01ab7d930a8550c0fb1709c357cad5c5fde09e7bfad8185c0c5b6b8b4c29.x.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 615KB - Virtual size: 614KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 57B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 543KB - Virtual size: 542KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ