c6d8f0e39238bdaee1de6760c787d920N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c6d8f0e39238bdaee1de6760c787d920N.exe
Size

2.0MB
MD5

c6d8f0e39238bdaee1de6760c787d920
SHA1

d681f31834c44da172cb1bc5ac9af1ffc5b72dd8
SHA256

bdd60e588e90d3ee87d82c90b59371e4309f94cc383b037cd8183662406011db
SHA512

286dd6a28fc6e654d404eb6671b6f7a0b55a575baf8924431a06053c6cd24f199d7a4133a334ce59fad8ce462ec0a2948c3aec1fde035c845d4596418236702a
SSDEEP

49152:YjuIGcXJLrduEyztsR7OQzQzAmjqamm173:YKIfdd/yzt67OU7ap

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c6d8f0e39238bdaee1de6760c787d920N.exe

Files

c6d8f0e39238bdaee1de6760c787d920N.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 315KB - Virtual size: 315KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ