c2643e80efccc4d244d2a29181973024 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c2643e80efccc4d244d2a29181973024
Size

91KB
MD5

c2643e80efccc4d244d2a29181973024
SHA1

c56edfb79e7f4e40b3e8500fc210a4ee092ebe2f
SHA256

533a2acacef8b2aa4c09f1d909c22a5e5c443816b936ae8b5c3daa592e231331
SHA512

eb9edd29f39762d7f70506b14e93d6af508f0b1e410558e197225e6eb29d659c80de47ac7e8d03ad6814e20f729d8e9fab178f8bde0188991f0409f186c6948f
SSDEEP

1536:oI1bEQ2yLK8nVh2tn111nr5EB6bOBHvc07CC:oI1gQ/G8nVh2/Hr5EIbOlEOCC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c2643e80efccc4d244d2a29181973024

Files

c2643e80efccc4d244d2a29181973024
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

bckgzm.pdb

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 324B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ