5b6d604d2b35c5ace8b4f6d035986ff91fd24b97818fbdc15f2b462e93530fd6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5b6d604d2b35c5ace8b4f6d035986ff91fd24b97818fbdc15f2b462e93530fd6
Size

2.1MB
MD5

b6fd9d6826cac95cacb69e2988f131a8
SHA1

14c2af12cc05b721a2df570ded8d0fb60ec98253
SHA256

5b6d604d2b35c5ace8b4f6d035986ff91fd24b97818fbdc15f2b462e93530fd6
SHA512

7e624073ea89b079a78320728205373048ce1b2e993db65d1a960493b4a60512691e9ee92f05570e7f2ccf2c9e37f93759e40af7c654d0a2ab6425c3de10bfe6
SSDEEP

49152:M1EexgCq1nQT/yFUgoidVDWpyYCgM7U3pKLAMhcM4cIXY2NNe2ZzdACbatxHBHtv:ADZK0Mhj4cSrIvd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b6d604d2b35c5ace8b4f6d035986ff91fd24b97818fbdc15f2b462e93530fd6

Files

5b6d604d2b35c5ace8b4f6d035986ff91fd24b97818fbdc15f2b462e93530fd6
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KORVZdhl

Sections

.text
Size: 2KB - Virtual size: 1.5MB

IMAGE_SCN_MEM_READ

.data
Size: 701KB - Virtual size: 704KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ

.gdata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_MEM_READ

.gdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ