61f9c143c76c020a4c884325dba20b391341aeb6d4ead0ead6aeba41d2143276 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

61f9c143c76c020a4c884325dba20b391341aeb6d4ead0ead6aeba41d2143276
Size

6.9MB
MD5

83b05a4a23bd5865f89e307516769a6e
SHA1

a783d2304fad853e6a92c90c3409f369732fd0d3
SHA256

61f9c143c76c020a4c884325dba20b391341aeb6d4ead0ead6aeba41d2143276
SHA512

f31f32221d793d8e74dd05a98e566cc3d2be63b34696717f40485d8f31e7e91ebd7ff2483b2dfaa245b83e2b437f928be68c297d4b4dc515e0470891985f5ef1
SSDEEP

196608:ZK2+nNevvWstwr2m5BmycyEbSfasepd5e4x6+AjZ6mjxzj:ZDY6tiP3myRfzepXe4ny8gxzj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
61f9c143c76c020a4c884325dba20b391341aeb6d4ead0ead6aeba41d2143276

Files

61f9c143c76c020a4c884325dba20b391341aeb6d4ead0ead6aeba41d2143276
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ