6b674e14ada0c168ec094760fe398bba2cd5c567bd10e05ede61d4353eeda50b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6b674e14ada0c168ec094760fe398bba2cd5c567bd10e05ede61d4353eeda50b
Size

3.6MB
MD5

2b224b22d0fd3c738e318307b88fb161
SHA1

7a565a2b8307c6039abde8d7f09eb366248aaa38
SHA256

6b674e14ada0c168ec094760fe398bba2cd5c567bd10e05ede61d4353eeda50b
SHA512

55e9d3820c23f10cc1c02d67d3f92cc54e94ac3465f3c30162dbffab3af26cf5989aa5972f495e390be571621f4a811ecf44eda881a55e51550e7964732348d8
SSDEEP

49152:dxzWLnHFLHkJEYoJdXN0BMOwLloBrugXcY/TEzFhKPgssSt2gz:2DrJdXN0B7+sO7Zhv7StZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6b674e14ada0c168ec094760fe398bba2cd5c567bd10e05ede61d4353eeda50b

Files

6b674e14ada0c168ec094760fe398bba2cd5c567bd10e05ede61d4353eeda50b
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

appvlp.pdb

Sections

.text
Size: 196KB - Virtual size: 196KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 127KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.c2r
Size: 512B - Virtual size: 180B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ