6778f93e5770f0dc71ffe5c392e82cbc127437ec148e2fbd2beb9f5dfd544262 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6778f93e5770f0dc71ffe5c392e82cbc127437ec148e2fbd2beb9f5dfd544262
Size

324KB
MD5

f808bcc589087bc4617f6949e76b81a8
SHA1

3c76efe4c08873d6940fba6aa780ccdfd952aa75
SHA256

6778f93e5770f0dc71ffe5c392e82cbc127437ec148e2fbd2beb9f5dfd544262
SHA512

ea249b83991b066232015e4f5486b27d776828908e4ced3365473ed29e35813428a54b5fd058f5a244221059716359f95bc7902ba6c9622314277de7203c9889
SSDEEP

3072:5uVyuXEVa7U4aGXB6Y6Y6l6P6B6x6X6l6P6B6x6pPPPPPYifs6lDxVauMDHWJdIk:5WyuaX5i06p3p4OPVR/HN2zRLdK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6778f93e5770f0dc71ffe5c392e82cbc127437ec148e2fbd2beb9f5dfd544262

Files

6778f93e5770f0dc71ffe5c392e82cbc127437ec148e2fbd2beb9f5dfd544262
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 321KB - Virtual size: 321KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ