6d1b40af9d57fdb0bcc7ea2d60df56e0N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6d1b40af9d57fdb0bcc7ea2d60df56e0N
Size

66KB
MD5

6d1b40af9d57fdb0bcc7ea2d60df56e0
SHA1

4e16e6aac548edeae278dccd2f865b25278008b8
SHA256

d5eeac0da68b7674cb519a9d4e0e3e38ea4514d3a62ee2734e4de1dfc9c642ca
SHA512

27aac3e8508c1e4c29a9660d2c815c30155ea85225f1cabe40a1b440bbe4a77abda7f9628d05c3d9a6b5c1716e2f773840513632f06c981c80e6e12bd165d750
SSDEEP

768:BCru/f9Dw/Eizy4n8uZ5tUXMJ+fROUmELY2glEbM3j+rd+fpRfLTWLReOORu/:5q7zy48untU8fOMEI3jyYfPDEORu/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6d1b40af9d57fdb0bcc7ea2d60df56e0N

Files

6d1b40af9d57fdb0bcc7ea2d60df56e0N
.exe .vbs windows:4 windows x86 arch:x86 polyglot

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.code
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE