6946404395106ce1c17f1d5297214d75ddaeb4874d1f74aed76ce00eaba778ce | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6946404395106ce1c17f1d5297214d75ddaeb4874d1f74aed76ce00eaba778ce
Size

273KB
MD5

8c21b6eca061b6bc2b90390e23f310a2
SHA1

26bdf72a6c20dfacb8b5fea89184301aab74a00c
SHA256

6946404395106ce1c17f1d5297214d75ddaeb4874d1f74aed76ce00eaba778ce
SHA512

d334937f1e863a25fe0b39cf6a132ad383a693aca569d3da820febd1c7003d9c720e1023b0214b71e564402d1956427e6bc7bbc8b084a9358d3c441dec4b0fc2
SSDEEP

6144:l0W72x7sOcGUv9myaurU+cI26VWxtoloBV+rLx:sk9mybUIVJ6BV+rLx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6946404395106ce1c17f1d5297214d75ddaeb4874d1f74aed76ce00eaba778ce

Files

6946404395106ce1c17f1d5297214d75ddaeb4874d1f74aed76ce00eaba778ce
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

napstat.pdb

Sections

.text
Size: 119KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 139KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ