6e1b556620449c9f30563bd3e3053e7d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6e1b556620449c9f30563bd3e3053e7d
Size

27KB
MD5

6e1b556620449c9f30563bd3e3053e7d
SHA1

620289fa30d1adb9aac84f160caadfac594ec133
SHA256

5b95f98362a98bda4d7b029a46e36216cf6233304b40b5849cd91b235ee7329d
SHA512

cc44da266d151210809c1d64effd94c868d293f895e5533ad6ea8e588636b99e15073b56deda989fadbde72027fead40685885b047af292fdb80b5a664321f49
SSDEEP

384:7Ez0e11F1YHgx4x0EgDEoGlZWcLF+5Ul3UHnHd+:7SF4RxuDEzZLCUGHd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6e1b556620449c9f30563bd3e3053e7d

Files

6e1b556620449c9f30563bd3e3053e7d
.exe windows:4 windows x86 arch:x86

d1de9cb05364462a2d510f7f8254cac2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mpegsys

ord46
ord32
ord38
ord40
ord39
ord41
ord31

kernel32

ord364
ord305
ord813
ord638
ord710
ord553
ord419
ord329
ord476
ord513
ord385
ord160
ord822
ord248
ord765
ord346
ord657
ord784
ord395
ord304
ord362
ord719
ord185
ord811
ord318
ord312
ord406
ord722
ord377
ord443
ord441
ord512
ord511
ord795
ord509
ord793
ord736
ord296

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 462B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ