c836cc37a61fb2c2be8ef7261357ebeb | Triage

Sharing

General

Target

c836cc37a61fb2c2be8ef7261357ebeb
Size

4.3MB
MD5

c836cc37a61fb2c2be8ef7261357ebeb
SHA1

ac27a2820fc3982d31ea5a0f823a96ceeea6d3c2
SHA256

11968d6a723879a46cd9022fd6b84eea1378dd5af0b488ae665149e8c52d43bc
SHA512

66fd46cb014e3f9aafd3e8fcbc4fd93e932ff61d9b013293e5cad9644882dda434d5850d56680056d296b3a8162a6d7273666cf1233eadbe9e07d87e945ee2d1
SSDEEP

49152:SqBNooJdXN0BMOwLloBrugofrbtL2tLDaDzxgcY/NHF+3j5D78OBUXH:tJdXN0B7+si3V2VuDFpUCs1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c836cc37a61fb2c2be8ef7261357ebeb

Files

c836cc37a61fb2c2be8ef7261357ebeb
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

bckgzm.pdb

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 324B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ