bc6662ed0d6d3b54d9cd9393109ed3d30329df350cf949a5ba273aa9100e65b8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bc6662ed0d6d3b54d9cd9393109ed3d30329df350cf949a5ba273aa9100e65b8
Size

313KB
MD5

d516d4718d235651c117d79be58cd67d
SHA1

2856e5edd7e006e1fdb8e247c41e3a23f1ed0503
SHA256

bc6662ed0d6d3b54d9cd9393109ed3d30329df350cf949a5ba273aa9100e65b8
SHA512

ff5baf2d9955e36b5b04bf50a39dd91a56ff3cf9590f3ea18a7568a5f6af13dd5e8e76e6f4210cd8cbc770c8aad20c71cf640c6036792dce111723789aa9f0c1
SSDEEP

6144:Y5FQCW26zbuv6+t//bQTmkXx3PIKHk0hXNTM2alOMxtjCxTqh8zJHtr/GU6I2NEm:YzQC6uvv/TQakXx/VHZhdTDjMx9CpBHa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc6662ed0d6d3b54d9cd9393109ed3d30329df350cf949a5ba273aa9100e65b8

Files

bc6662ed0d6d3b54d9cd9393109ed3d30329df350cf949a5ba273aa9100e65b8
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\56zm\xzd9\obj\Releas\Zaq1.pdbpdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 311KB - Virtual size: 310KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ