d8b2c616b504997db5034fde2ea89594b60e1d92656082e2f25b050325ee7bf6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d8b2c616b504997db5034fde2ea89594b60e1d92656082e2f25b050325ee7bf6
Size

83KB
MD5

89266d2f959563a2956e173ef01e5a32
SHA1

3487e68ad1dd08c32d559857be81d1fd3cea294c
SHA256

d8b2c616b504997db5034fde2ea89594b60e1d92656082e2f25b050325ee7bf6
SHA512

54c877f8a973fafd8dc3830503848482bcb9fb9fa412875b2c23189341255b91b0dd5fcf93d46a29be54b247e422de4c44e81e9fb5ae901a0669d6106586fdbc
SSDEEP

1536:8BIPfSbS9vMBN7rQOJ7CFToTCzhcRguhwxTyPCb3lZpdym4dy7p:8yXlvq7jSP1cR2prbpdCY9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d8b2c616b504997db5034fde2ea89594b60e1d92656082e2f25b050325ee7bf6

Files

d8b2c616b504997db5034fde2ea89594b60e1d92656082e2f25b050325ee7bf6
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

colorcpl.pdb

Sections

.text
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 78KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 556B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ