6eff1376cf15312633dcc139c9820d89472d4a7b4f2f5f8e3d289af0370a6184N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6eff1376cf15312633dcc139c9820d89472d4a7b4f2f5f8e3d289af0370a6184N
Size

2.8MB
MD5

a06fa6a01e49869668aa710aa82c2070
SHA1

a9621c1f67bff4715d1b7c6f36229c28ed0dbd54
SHA256

6eff1376cf15312633dcc139c9820d89472d4a7b4f2f5f8e3d289af0370a6184
SHA512

a375157b7f6ad5dc248f62e9695157fb44978bee87a1e6122a3d9f5ff48a6018a0d9ecab88cccdcd40522c48dcb7df41888b6dc3211a78ae82f56a1faea8ca98
SSDEEP

24576:Tl9JJd3n+Otv2K5iP7idisuzP/ojqXGaEKKYJkwrsrIZmDp/8:xOyCPOdibAuGAYcMC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6eff1376cf15312633dcc139c9820d89472d4a7b4f2f5f8e3d289af0370a6184N

Files

6eff1376cf15312633dcc139c9820d89472d4a7b4f2f5f8e3d289af0370a6184N
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.cdata
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ