6d09d484d7ccdad1c341eda09fe69026 | Triage

Sharing

General

Target

6d09d484d7ccdad1c341eda09fe69026
Size

247KB
MD5

6d09d484d7ccdad1c341eda09fe69026
SHA1

2ff7f3dec3de4edf9dc3a3453fdae689cc0ced01
SHA256

2c8249b71e4e027717794e5ab0a27a8ce3ae3732e8de32a0d8e1b9acf2c73412
SHA512

7b7c5d74fc1710f3bd8f888488337c51964bd9e6020c73ad12d7527d8d84174621b366eab899dc7deb8e385def5d3ee53f8af0099a3adc3727d756f6065c987c
SSDEEP

6144:nORGrsbX9LaO7KNGuTmEVmeM3E6Ygf4f+G:nOKea7LYP42

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6d09d484d7ccdad1c341eda09fe69026

Files

6d09d484d7ccdad1c341eda09fe69026
.exe windows:5 windows x86 arch:x86

79b3362178937bf9559741c46bb9e035

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 730B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 243KB - Virtual size: 242KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE