b6427a3b402a3e7a1390abd7fec309f04e956845945613957c24f24be7839d4a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b6427a3b402a3e7a1390abd7fec309f04e956845945613957c24f24be7839d4a
Size

6.9MB
MD5

5eec3a1e75315043ed7525559383c4bb
SHA1

8174f4f95430f778a5b1fd898832dab325951274
SHA256

b6427a3b402a3e7a1390abd7fec309f04e956845945613957c24f24be7839d4a
SHA512

4b21ecf197f3cb5d0034218442197467bf43f605a751a09751383cc9bf9d908b21528a981ebe8bddd90bbdaa7009dec8c853150c18d97d1b12bcc83fa76e337e
SSDEEP

196608:xH/2cOhoGEpX+jRFRvz29jgM7+3Utny3r/mvZO0agzj:ocOhoGE1ArRvqlgM7xtAT0Hzj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6427a3b402a3e7a1390abd7fec309f04e956845945613957c24f24be7839d4a

Files

b6427a3b402a3e7a1390abd7fec309f04e956845945613957c24f24be7839d4a
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 24KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ