6ea2a98499b97380bccd0d3afd9f880b4fce7ab7e100bccc3229f6d6b0e089e9 | Triage

Sharing

General

Target

6ea2a98499b97380bccd0d3afd9f880b4fce7ab7e100bccc3229f6d6b0e089e9
Size

225KB
MD5

4e1f36d6717b18c6490a62ae88bc5fac
SHA1

e9fe209b4004f6cc3ffbb9f26e99a39c57dcbdba
SHA256

6ea2a98499b97380bccd0d3afd9f880b4fce7ab7e100bccc3229f6d6b0e089e9
SHA512

bb2f46db9a966368675fe911800c5905f629103b5a345138fe589b2ab907e53b660a94dea494db6d3fd1391b943f210473ca37280f53de510c5d668868a12c59
SSDEEP

6144:FcLlie/Awn+CqOGiVBEx58zvnnkpPMWu:F6lMxPMW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6ea2a98499b97380bccd0d3afd9f880b4fce7ab7e100bccc3229f6d6b0e089e9

Files

6ea2a98499b97380bccd0d3afd9f880b4fce7ab7e100bccc3229f6d6b0e089e9
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 217KB - Virtual size: 217KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ