70c6ca7f21b6f6899210f64811e7e9cc95caa22bb48dddc36071e622f88f4d23 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

70c6ca7f21b6f6899210f64811e7e9cc95caa22bb48dddc36071e622f88f4d23
Size

7.6MB
MD5

60f4ed6f0e75c6587cf37c192c11733e
SHA1

c281f6bb35c7f2969d093352cf37c2eebe347fba
SHA256

70c6ca7f21b6f6899210f64811e7e9cc95caa22bb48dddc36071e622f88f4d23
SHA512

c0b6a0a8cd9ae72d96e9442fb3fa27d45b09f2462fa0a6fddff7efcb698296d3c513961fc57d176aa32b44c7474baac94f1dfd0fb3bb0b99eed9193db582c081
SSDEEP

196608:fnnY8NWvGpWTTlm0OxwW+nFnfZsMUdFt30Dzj:fnnY8NELTIrxwlxQWDzj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
70c6ca7f21b6f6899210f64811e7e9cc95caa22bb48dddc36071e622f88f4d23

Files

70c6ca7f21b6f6899210f64811e7e9cc95caa22bb48dddc36071e622f88f4d23
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 24KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ