6ff1c146f38ddf0ee0ddcf60e9c08411 | Triage

Sharing

General

Target

6ff1c146f38ddf0ee0ddcf60e9c08411
Size

170KB
MD5

6ff1c146f38ddf0ee0ddcf60e9c08411
SHA1

02cc65fcc30b7e54a4d1c5eb1eeddd5f6ecab5ba
SHA256

bdb7debc5ead8736255ae99ff91b2014aa9930145a4263c55a8b38624ae4d045
SHA512

9d337ff224cc012aac33c62cd94b8bb9b843494fb3fc21a75a334d387c3850ab6964066c0fca91d4ec1481e4aa69983c1b78f018fd6f3cc209824683a6d3e820
SSDEEP

3072:YfbCNiRHVJG2NC7HXNvjQmSeQfGtPwqOo6VaLpJJ45IJbfGDS:YfbfT9OzSz8UXMLzO5E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6ff1c146f38ddf0ee0ddcf60e9c08411

Files

6ff1c146f38ddf0ee0ddcf60e9c08411
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 204KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE