6bb1fc39a710a20d4bd7779731e0a972 | Triage

Sharing

General

Target

6bb1fc39a710a20d4bd7779731e0a972
Size

12.7MB
MD5

6bb1fc39a710a20d4bd7779731e0a972
SHA1

12b64c61fe8208acef248ec8e29fdad3bbf90758
SHA256

ed1d9fc091189331d57eba3193aa865680c155c2f1d846ca8a408c70edda8e8d
SHA512

6b4b2dd220cd376d9117dd88cb4ceb406148c1cbb42dfa3955d68e33c38e29021f03ff64887b3b4877fe8158a5a63140ba8f9247274f607ccaa54b79225c9b96
SSDEEP

49152:lD6jEjcV5chDISveiY6gDosgTsraT8q7u7jhQFjlRYHK8t54cZ1kZccahMPonhzM:pTOeuLFGiJ3P0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6bb1fc39a710a20d4bd7779731e0a972

Files

6bb1fc39a710a20d4bd7779731e0a972
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 12.7MB - Virtual size: 12.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ