6bbd0bfd2305a42772c5271626a358b0N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6bbd0bfd2305a42772c5271626a358b0N
Size

8.6MB
MD5

6bbd0bfd2305a42772c5271626a358b0
SHA1

cb0f12c3fbfaee1e6148974731001ed19068e469
SHA256

91f5d7593e91b70fd451eaab4f32cea11eda49ff044f7a1c77d2509f796b0cee
SHA512

28480ba5ba458633a3e32b3b32f4b6c2c0cc1c110c68952c0c8c85a1514324fde602db834a1f1fefc103995bbda03b53e66bcdcc89fd7887ffaa33770fbe8af8
SSDEEP

196608:mgCMwVEo+2XMCHGLLc54i1wN+QjXx5nDasqWQ2dTNUGqlE+iITxemb6jYk:bCPVEb2XMCHWUjojx5WsqWxTw9T0hj

Score

3^/10

pyinstaller

Malware Config

Signatures

Detects Pyinstaller 1 IoCs

resource	yara_rule
sample	pyinstaller

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6bbd0bfd2305a42772c5271626a358b0N

Files

6bbd0bfd2305a42772c5271626a358b0N
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 168KB - Virtual size: 167KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
main.pyc