c6212291df64bc8ea2f6ff0ac3d20ef2 | Triage

Sharing

General

Target

c6212291df64bc8ea2f6ff0ac3d20ef2
Size

16KB
MD5

c6212291df64bc8ea2f6ff0ac3d20ef2
SHA1

a4b5339883a5e528153afc39f78f0e95b49b3476
SHA256

d8507d6901f212fb91e8232c1666f2697e58456fd87c652c892281adbed19334
SHA512

1d7e81b74b404f43a18350f70e16acec7e7355d42ab38da2611be7401e06f7181c67961eb2d20678b87a89c7ec0e322a15cc1bd2fffa14b29e02ae93ffe246f4
SSDEEP

384:GYXh07RGrO7d9icOxYBcbVilrvYCErmDiUTX4:GYX0h7S9bVilEFrmDS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c6212291df64bc8ea2f6ff0ac3d20ef2

Files

c6212291df64bc8ea2f6ff0ac3d20ef2
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 126KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 326KB - Virtual size: 46.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ