6b2298a89306961268145c5d29704e5a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6b2298a89306961268145c5d29704e5a
Size

168KB
MD5

6b2298a89306961268145c5d29704e5a
SHA1

3db2f99de3bc9ea148f14da44bd2e4aaa5b026b5
SHA256

e1756bde9581a2824558ec58ab1c47e546530ba6d7ce4dc3273de39e25916189
SHA512

3114b431a93b2ba658f18e2ac9fcecf7908377915df47c16bd77245b914bfe5481f94bdd65588f87c8e7c9b1f6d3af9cf8b509f221407d3a3a652101696cf213
SSDEEP

3072:6e/GcG0D5JqJcIjG5uX97zTnF0ocjc1vonxilk4EnfPKfPdGOcPTdFGrHkMBkFh:d17UTjgu1zjMAox1YVGOMNMBA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6b2298a89306961268145c5d29704e5a

Files

6b2298a89306961268145c5d29704e5a
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

87876
ef3

Sections

CODE
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 151KB - Virtual size: 150KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 277B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 79B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 416B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ