6bcbf46ea9f61b2e443ae1b4d8b8e63e610fb894ee404694c166c96486735fa2 | Triage

Sharing

General

Target

6bcbf46ea9f61b2e443ae1b4d8b8e63e610fb894ee404694c166c96486735fa2
Size

657KB
MD5

b305cd91272473b55f47ce13eca2f049
SHA1

dea9b56ab6ee5d31e35e62322273738ee1997166
SHA256

6bcbf46ea9f61b2e443ae1b4d8b8e63e610fb894ee404694c166c96486735fa2
SHA512

99def62c0e4fce5f133898c1cd8c63dee3cf223c832b44830d54ae745695ad36558cae8eff99a75981a5e75c2453e6bf63b034318b14097cff9d8350d01fdec2
SSDEEP

12288:j+3yvK/gEOcG4sKbZTckii5Ni5wHT+Haqv3Tuyk8:AytxKbfieNlHT5CCy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6bcbf46ea9f61b2e443ae1b4d8b8e63e610fb894ee404694c166c96486735fa2

Files

6bcbf46ea9f61b2e443ae1b4d8b8e63e610fb894ee404694c166c96486735fa2
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

XjCb.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 654KB - Virtual size: 654KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ