b6cad1187f3b7324d4a07f795fcf22f1ad117dcab3df2fad40b4f51668aa4cab | Triage

Sharing

General

Target

b6cad1187f3b7324d4a07f795fcf22f1ad117dcab3df2fad40b4f51668aa4cab
Size

2.9MB
MD5

8f608b251b9d10b0eba7fd0ae2dfa1c4
SHA1

27f55e0b56438dcb3d433a3f45b075cbc84fa641
SHA256

b6cad1187f3b7324d4a07f795fcf22f1ad117dcab3df2fad40b4f51668aa4cab
SHA512

464b3ace4af5070179de51cf7ea9a56bdbe3cdfcf2da33dc69159d90699e851cc5769f8d0ec3eb577e79664dc65bd993de974847007ce0b1cfb914520e207009
SSDEEP

49152:F2dKgqFC/iTqHv7bb9NfQSvzZxPQUlsMuiRPzGjNBi+tsvDcRY0E:gARFpTIXhJ51xlax/7TtsvIlE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6cad1187f3b7324d4a07f795fcf22f1ad117dcab3df2fad40b4f51668aa4cab

Files

b6cad1187f3b7324d4a07f795fcf22f1ad117dcab3df2fad40b4f51668aa4cab
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ