b006fa613c852b9ab357094e5b1fc94f4541df36f67261395ae1c5d2cd15cfe0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b006fa613c852b9ab357094e5b1fc94f4541df36f67261395ae1c5d2cd15cfe0
Size

8.9MB
MD5

dc6109c69d4ed62320b2887900518099
SHA1

d730a54e31588f1190dff4c4cd345c0e96aa01fa
SHA256

b006fa613c852b9ab357094e5b1fc94f4541df36f67261395ae1c5d2cd15cfe0
SHA512

db5c40f2864b145c408787841db4a1d5a67ea5020d6726f01071942ee11036c51658d8bb24c268f8911cb85369e40863794a8341d3be8764199aa51d8d41a6a1
SSDEEP

196608:KRhzZxC98vmwWuVSeL6ktQ42iJiM6vQLco/9VRXEIk2lA0sZo4:AnxmuUaQ42iJiRv6xrl9oo4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b006fa613c852b9ab357094e5b1fc94f4541df36f67261395ae1c5d2cd15cfe0

Files

b006fa613c852b9ab357094e5b1fc94f4541df36f67261395ae1c5d2cd15cfe0
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 8.9MB - Virtual size: 8.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ