b6011c96ca21d6d77bd6073b25eba0dc1ddc35a398a4a7c0e3607ba0a51a9812 | Triage

Sharing

General

Target

b6011c96ca21d6d77bd6073b25eba0dc1ddc35a398a4a7c0e3607ba0a51a9812
Size

366KB
MD5

439c08e1f709d89a42b69b967edf68b9
SHA1

45828758b3e1e786c7201f2c8d03c50a5cd8b320
SHA256

b6011c96ca21d6d77bd6073b25eba0dc1ddc35a398a4a7c0e3607ba0a51a9812
SHA512

c119a472aec5fbf1b97cb07b83b5c5266759445636bf96b178d5da941578c1a6a6518b7d13b527a842f6e46ec6cec112e77aa83a69b948cae361efa1b644b696
SSDEEP

3072:Ef8U8GWujPbMdhI3WVRhXynkUL2ABV6huNMyGiR:E9nWGP4dGWVduF/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6011c96ca21d6d77bd6073b25eba0dc1ddc35a398a4a7c0e3607ba0a51a9812

Files

b6011c96ca21d6d77bd6073b25eba0dc1ddc35a398a4a7c0e3607ba0a51a9812
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 467KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 248KB - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.svmp1
Size: - Virtual size: 13.2MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp2
Size: 14.2MB - Virtual size: 14.2MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp3
Size: 4.7MB - Virtual size: 4.7MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp4
Size: 11.3MB - Virtual size: 11.3MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE