6799dd085ff74882066595faf50e724f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6799dd085ff74882066595faf50e724f
Size

380KB
MD5

6799dd085ff74882066595faf50e724f
SHA1

fceeb27c2e2d23fe7ffb122b42b9378e9e821fce
SHA256

4083d66ad3bc6d0cb4b29047b9a2dff0f291ae91567d4b8f1e7f3223b027307a
SHA512

01432c8f85d9dd0fd83cc4f0e2c94bc13ce352ef7a160ba4ad5c283c7e57a411fda68e48833916c2f49ae47673d395b751309f6f5f5846c6e694bed7f0de9fec
SSDEEP

6144:tsWmlp3+FZzISRfk4CtubvZ379Hb6yZknuG60k5gyVMf0YchucOlK:tsvlpmZzIwCtCPbr3CevMfRcIcOlK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6799dd085ff74882066595faf50e724f

Files

6799dd085ff74882066595faf50e724f
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 16KB - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

kfhjfh
Size: 359KB - Virtual size: 864KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nah
Size: 434B - Virtual size: 434B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE