6afe6fbf1673bff798cbd3c75a3693828bfb1583128b446ff5bbe153ec0dca80 | Triage

Sharing

General

Target

6afe6fbf1673bff798cbd3c75a3693828bfb1583128b446ff5bbe153ec0dca80
Size

837KB
MD5

0021313d198853470f2d8f414cd12ec5
SHA1

02e43ff88d3f7e44c0a93574d0d20160931fcebd
SHA256

6afe6fbf1673bff798cbd3c75a3693828bfb1583128b446ff5bbe153ec0dca80
SHA512

d4e9e056a7301af27479cf5ea677fb85e92605da8c7974baa3d8ad01efa8d241ba18dad0c5c84d251bfda861389a0b028200c6123bcd75c8aa29b8590cccdb06
SSDEEP

12288:J3TdtLW5WIj1YSSdFxsBSXyMzBUWb9lx/lw6I78ZmV8Ne:hDsj1dEcBcJ9nPx/lw6I78ZmV8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6afe6fbf1673bff798cbd3c75a3693828bfb1583128b446ff5bbe153ec0dca80

Files

6afe6fbf1673bff798cbd3c75a3693828bfb1583128b446ff5bbe153ec0dca80
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 193KB - Virtual size: 408KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 17KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vc++
Size: 82KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 536KB - Virtual size: 558KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE