c6dd0f19887a981cf7a3723925e88c2e[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c6dd0f19887a981cf7a3723925e88c2e.exe
Size

553KB
MD5

c6dd0f19887a981cf7a3723925e88c2e
SHA1

7dd5a8050e59d15664c49133631fb10d63e1ba39
SHA256

b7ff6deb53f2764d9784adae808f30d6e0d6c638538b7ff7775fc93f59857d73
SHA512

24f4c32c3add84f905ad5b8485266ac4dd82287350f93427ccc2eb8f049993b64cbeb670a5b0b43baa51c968faf5ae8a124f70a323f7e5989c3b2845db3967b8
SSDEEP

12288:GRYco+gunQUnykqVNeN24evDgYI4a5UlB4YKO3FR:G2ZunQUnaVNeN2/DS4a5aB4+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c6dd0f19887a981cf7a3723925e88c2e.exe

Files

c6dd0f19887a981cf7a3723925e88c2e.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 325KB - Virtual size: 324KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 181B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 226KB - Virtual size: 225KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ