6791d3db6fd4d06ca6a90fe3552114edfa05c3aa0cf989413e3c0339f41af5bd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6791d3db6fd4d06ca6a90fe3552114edfa05c3aa0cf989413e3c0339f41af5bd
Size

115KB
MD5

41a0b97dacef32e181b32a2c1556573e
SHA1

9797f57f5ab67c78ef95c3311d334fd52978379b
SHA256

6791d3db6fd4d06ca6a90fe3552114edfa05c3aa0cf989413e3c0339f41af5bd
SHA512

afb3f9777bf057b22afa5548e5d8192d28ee97c26d5920917da8a8f1022dfe5962b33aa9eed6a1d51a95dc8f3ddb88a2355ca5c0b2468680842910418eb870f0
SSDEEP

1536:Jg/rdMsNpK5OphwBbffd3aK30lC2DK0ZF8gasC9TPFM9avimiNrI:GdMsNU5OphErkK321+0ZSrO9avimD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6791d3db6fd4d06ca6a90fe3552114edfa05c3aa0cf989413e3c0339f41af5bd

Files

6791d3db6fd4d06ca6a90fe3552114edfa05c3aa0cf989413e3c0339f41af5bd
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

IonLoaderWS.4.pdb

Sections

.text
Size: 111KB - Virtual size: 111KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ