2f6a0e6529558e671af624bdce620db2faa2f975351a30ad84aff1d4fbcf68c6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2f6a0e6529558e671af624bdce620db2faa2f975351a30ad84aff1d4fbcf68c6
Size

7.1MB
MD5

6c4c6ce6d6cbf648080a085d46cafb41
SHA1

efd9f222f40af586f383c807c15a755ac03b7ba7
SHA256

2f6a0e6529558e671af624bdce620db2faa2f975351a30ad84aff1d4fbcf68c6
SHA512

c12cfe60d1a116f01f883daa5f5602478bcf282680016eea7167a65d0f11bf2436c13e2ad39fc2fa246a98fc36eec4ec935e32249f0fbffa853fc37b42a8a0c7
SSDEEP

196608:Wxm5D5YUyRe7VvZKwamjGKAVW7R+gSoASGm8PvsLMwzj:wRepZKwaS79SoASGDP0Qwzj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f6a0e6529558e671af624bdce620db2faa2f975351a30ad84aff1d4fbcf68c6

Files

2f6a0e6529558e671af624bdce620db2faa2f975351a30ad84aff1d4fbcf68c6
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 77KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ