6cbbc0fae963853b44deb227e87ae3b0N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6cbbc0fae963853b44deb227e87ae3b0N.exe
Size

1.5MB
MD5

6cbbc0fae963853b44deb227e87ae3b0
SHA1

26f833b547d27ea801dd7c090719bc47ddd9480a
SHA256

d3ba470ff1cac015a806593503e9b18d4a129af32bfe592539ed4d1a04c57356
SHA512

bad5da9f2cdb71d7ec2962b03215fb3f36756a3a1ac32f574c77000af3d012062d4dcf3566756e6d5c82a98493c3d9784b1635c405baf2d30fa9ac9f49cc9346
SSDEEP

24576:04HOsRgiip8JOBE6EhWE6Ehex/B5ewYsKUnNzO0LdXewKNnpYx/WnSyhbzv8O0X:04usueJOD0O0iBQCKMN7pXRKNnpAWSym

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6cbbc0fae963853b44deb227e87ae3b0N.exe

Files

6cbbc0fae963853b44deb227e87ae3b0N.exe
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

F:\Office\Target\x86\ship\postc2r\x-none\msosrec.pdb

Sections

.text
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.c2r
Size: 512B - Virtual size: 480B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ