6cc57756cce11a6e85d4231edc627e30 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6cc57756cce11a6e85d4231edc627e30
Size

799KB
MD5

6cc57756cce11a6e85d4231edc627e30
SHA1

ce3de6842e206c95862051063d73bcd14a4251e6
SHA256

e56b430b525995640320d39b836283378b00410755806f4840fb4bf9e094286b
SHA512

1ce08b2e2e4f334645a7710b9607b6b5b36318920dfcf8266e2cee35c0df735f45697e5b9dff5706b99d670b10425e7002ffb87f466bdb6182682ed918327ef7
SSDEEP

12288:+xpJ5f7t03pBcOrK//7fsG39c6tYp7KlBHInhxMw5qMYf10WRsP41:KpffpAe513PtoQI4wMx3M41

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6cc57756cce11a6e85d4231edc627e30

NSIS installer 2 IoCs

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2

Files

6cc57756cce11a6e85d4231edc627e30
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 160KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 187KB - Virtual size: 187KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ