ff6ec49a610d629979c71e060142e4102f5111cdaf14be3a0b89fc2a4f2e9896 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff6ec49a610d629979c71e060142e4102f5111cdaf14be3a0b89fc2a4f2e9896
Size

80KB
MD5

686c8298bd18e8d76b9503bbd96d8b96
SHA1

ad899a3a8e8607d547da857bbbb3c5908fac57e9
SHA256

ff6ec49a610d629979c71e060142e4102f5111cdaf14be3a0b89fc2a4f2e9896
SHA512

2f4ccc5ca305bb633ef29f4f4be24af627e0fca65a499e0602c0c4c329a3ddd50ad918b98e2d21fd81638fc28655a5df17783fbb0634f3d120b04d9af1a4556a
SSDEEP

1536:W7ZhA7dAZ1++PJHJXA/OsIZfzc3/Q8zxY5eYs:6e76mQSox5k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff6ec49a610d629979c71e060142e4102f5111cdaf14be3a0b89fc2a4f2e9896

Files

ff6ec49a610d629979c71e060142e4102f5111cdaf14be3a0b89fc2a4f2e9896
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 352B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ