1b6a679ed975a6be32929edd90b310e425fc7359739c37ccf82d674da2644886N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1b6a679ed975a6be32929edd90b310e425fc7359739c37ccf82d674da2644886N
Size

367KB
MD5

62b8637e2b6f7c5485998c4779371b90
SHA1

bc74f57494e10eb0da192a6cd40f161adffb891e
SHA256

1b6a679ed975a6be32929edd90b310e425fc7359739c37ccf82d674da2644886
SHA512

cafefaf0f2ec41cd66340a7b2daeb9e2c1ac7e0141a4a22ef9e7e82d6c11e65853ebfed5bc917e2de31c5b68014a276cf59d549809a72f8592964046dc2740db
SSDEEP

3072:0sHEhLfyBtPf50FWkFpPDze/qFsxEhLfyBtPf50FWkFpPDze/qFsbwzE8Ah1MSBl:RwzE8hOStg1aH5VZf6yxRZEqZ0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b6a679ed975a6be32929edd90b310e425fc7359739c37ccf82d674da2644886N

Files

1b6a679ed975a6be32929edd90b310e425fc7359739c37ccf82d674da2644886N
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 227KB - Virtual size: 226KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wixburn
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ