c6197bb9b782f5ef7359e4da53514a02 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c6197bb9b782f5ef7359e4da53514a02
Size

333KB
MD5

c6197bb9b782f5ef7359e4da53514a02
SHA1

2eb379ffadf382ecfe5032872b135ea9af6d4a04
SHA256

c8d1d456bf4ae7d9111674c6174e01db30519155420a9f128d039a95dc4013d5
SHA512

4b313a9bf359c99619ccbf617458d88a2b4e6a7fec2b056f70a58183cf2a1f49fdf3806b69d0b9eb591c399403f5b0578a8dd95b3b6f761b2205ddb1a0fa7b8b
SSDEEP

6144:I7L7dif7bo5zDa4PwGHk9kFMxNsmfPQ8hKOpAV6oM7:I7sYzDa4PwGEamxNsmfPLhA5M7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c6197bb9b782f5ef7359e4da53514a02

Files

c6197bb9b782f5ef7359e4da53514a02
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 148KB - Virtual size: 147KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 110KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ