68f971176e010be7518ad216fef9f996bba7f30d7a385e37208cc93403bcba0b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

68f971176e010be7518ad216fef9f996bba7f30d7a385e37208cc93403bcba0b
Size

773KB
MD5

159391607ff46782c83d669180c20349
SHA1

4693dcd5f5feba854d483946366a84f641d67d1c
SHA256

68f971176e010be7518ad216fef9f996bba7f30d7a385e37208cc93403bcba0b
SHA512

a95ba909c8bf6379eda9de90fc5b7e6ec17496addf0e254f6d2a5186c6f019081eb6aaf27c8710c440b314a2a88ec579558528046a829b4be069d2aab4d306e9
SSDEEP

6144:RXq9PhINaS/kf4Dtnf7ZKa6r+0wTeUC2ZRLqz+7e6/MrTI6cjEW4ImBfJCuqnOX+:tgSO4Dtnf7B65yehh60CuqnOX7uQ53

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
68f971176e010be7518ad216fef9f996bba7f30d7a385e37208cc93403bcba0b

Files

68f971176e010be7518ad216fef9f996bba7f30d7a385e37208cc93403bcba0b
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 745KB - Virtual size: 745KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ