6498a126f29491ddf052cf20db189ea4 | Triage

Sharing

General

Target

6498a126f29491ddf052cf20db189ea4
Size

43KB
MD5

6498a126f29491ddf052cf20db189ea4
SHA1

e518ce476e1902796363d500c541b62ff56a5b67
SHA256

7ae2202b08effc06ac782db48f9154fef94ed3d95a633679268b89be9e64fe6e
SHA512

d6314321389e19ec5b26f3e07a77b49833d280ef433c2efda1bfcb5088d4a959f324bab3cdbf28545b77c041a2614e6c32f0206624a9c9fceba67100529642e7
SSDEEP

768:sL2/GuRJFl2JAzuBs9AlB+RagZYPKXb6+zIXX+EBvPsuNK39186ukvwW6:62/GuRJF8JAzss9AlWag9baphKNqDkvq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6498a126f29491ddf052cf20db189ea4

Files

6498a126f29491ddf052cf20db189ea4
.exe windows:0 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ