b6c460abfa18b790b469bef98273b5491be0886e546ea3641816326b19a098d9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b6c460abfa18b790b469bef98273b5491be0886e546ea3641816326b19a098d9
Size

673KB
MD5

5fce0e2fd3bfee4e2226987fb44a55cf
SHA1

e8ab1ff4a918a066d6d755848c2436f9402e4a66
SHA256

b6c460abfa18b790b469bef98273b5491be0886e546ea3641816326b19a098d9
SHA512

2e740e0665c7aba3f507860ee3e1327492ebdca585496479728411e7694e7f7a32d4465118fd415b12a1ffc467317d6452e1596feb829d2d400c195dfae308d7
SSDEEP

12288:QW1+cxXQ+FMGrZXc77qiUBOewjyJYdLDxl0d0eeyrKbSJAXrlPkkt5OY:b+cgGr+WyQYdLDxl800KbYMBskzF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/3gw4s4Tv5lHhJj9.exe

Files

b6c460abfa18b790b469bef98273b5491be0886e546ea3641816326b19a098d9
.zip
3gw4s4Tv5lHhJj9.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

xheH.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 798KB - Virtual size: 797KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ