c56edcde7cf1b03e1d30fb561173b869 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c56edcde7cf1b03e1d30fb561173b869
Size

91KB
MD5

c56edcde7cf1b03e1d30fb561173b869
SHA1

ed7660beea2c72cbabe97c6b6705adff7c28c352
SHA256

1c340888d1eab43eb72bd2be5915d9a49b957ef32f8949f898385df646f80715
SHA512

46adc6f9119cc2e71009b5a24ab945195c18a88f62b83bd3741f05378daa19be36e889f85163c1158015cbdfd3c340cdac169a068497a4836b081c559b72d275
SSDEEP

768:+tI1gZAEl/L4jKZru4eOTJwYf2mGGAHwvLtBu3iqboOYYYYYYYYYYYYYYYmYy6wZ:oI1bEh88eOTeY+TGx7W+JkNxf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c56edcde7cf1b03e1d30fb561173b869

Files

c56edcde7cf1b03e1d30fb561173b869
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

bckgzm.pdb

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 324B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ