6849ff1056ed5c9c91dbd26d01d1e6d9 | Triage

Sharing

General

Target

6849ff1056ed5c9c91dbd26d01d1e6d9
Size

1.7MB
MD5

6849ff1056ed5c9c91dbd26d01d1e6d9
SHA1

b1dae6b0f3d475019a0aec9be51ffbc764318a51
SHA256

01a2ad8f57fcacceef83d7cf99b69bff147a00fbf22ab63f231dd9c55c764412
SHA512

3ff7f3a2dca64950a4b67a7c7d7c689b14a4a280ab3aed5b251f7323e599e412111eac5a701d09b4b546d7685a54818a6b8665fe1e4cad1d4e9ead1b48a11cc9
SSDEEP

49152:zMHReE9Ds2JYkGgZFvTp41JJxUEYvPMHvf6P2V+Nzc:zUpDPBGgZx1wJyEePC6PaEc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6849ff1056ed5c9c91dbd26d01d1e6d9

Files

6849ff1056ed5c9c91dbd26d01d1e6d9
.exe windows:4 windows x86 arch:x86

2eabe9054cad5152567f0699947a2c5b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpy

Sections

Size: 42KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 1024B - Virtual size: 2.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

vieqkyex
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

bsbqqkjl
Size: 1024B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.taggant
Size: 9KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE