cf6d03c4000d97f145816b77e94b09a8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf6d03c4000d97f145816b77e94b09a8
Size

269KB
MD5

cf6d03c4000d97f145816b77e94b09a8
SHA1

b685b9487625473d51fa5e0e7ee1e6b19f98ca4c
SHA256

5726a4f1ddd3edf4d8f0b955d32e2ba35d43f29b593797dcf796482dc64cc5b0
SHA512

3d0652ff9bef02b264188e1351d35f73654f7d8ead57d6220b827164aef9977161812d606d6039a14fc1edc6e6aa4f9a8afad54084f0e8fc3b5d8305ad6b0be4
SSDEEP

3072:uRlTjv+MEcuSvcLYhiV/klvmwIw6l8Nyi2LzLI4xJGzbhyW4+ZlR3dx9QlBKnY8m:Av/NJ5pNy7Q4j4rfTDQ3KYE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf6d03c4000d97f145816b77e94b09a8

Files

cf6d03c4000d97f145816b77e94b09a8
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

EoS/aI
Size: 171KB - Virtual size: 171KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ