b6f9d12c805c22be1d6730cc92ef3686[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b6f9d12c805c22be1d6730cc92ef3686.exe
Size

111KB
MD5

b6f9d12c805c22be1d6730cc92ef3686
SHA1

116568186e6b4c9a645c83557b79df20dce4622c
SHA256

20188b57018513d72ca7bebf3efdf9f8c5b754099e43911e079fa897334e9a47
SHA512

5e0882f9b728c8e9c0d7f27f34fa40fce2f2b5f9cf777c6e6bba1385f29c4791df910281b4ef3588d00b19cca24932386ec33aae29c24bec462986792e818f4e
SSDEEP

1536:0yOmF8MK9SvKbcs3Cg+PzdzP30iL9TsAmgRQrrRRs3cO57OWxXPu4n6yYPLBgI7n:q9stsyg+rsA9eXE9pui6yYPaI7Dehib

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6f9d12c805c22be1d6730cc92ef3686.exe

Files

b6f9d12c805c22be1d6730cc92ef3686.exe
.exe .ps1 windows:1 windows x86 arch:x86 polyglot

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 122KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ajelhf
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ