6c97f943314d95f62fa8e2401e06f0302b971d4ef4b58afc082f69674a668bed | Triage

Sharing

General

Target

6c97f943314d95f62fa8e2401e06f0302b971d4ef4b58afc082f69674a668bed
Size

677KB
MD5

d86b38397e13c2b23ebbc9c62fd96100
SHA1

65193a3ea352c8f9bc76c4d75b0bf17e346c1170
SHA256

6c97f943314d95f62fa8e2401e06f0302b971d4ef4b58afc082f69674a668bed
SHA512

b2f9675af6e79d18bee3268ac043f4d3c9302c745ba6427e3ceacbc5c06fc205ccea4c913d6b3a6a7a29e9042bb539873512676daa3d7473e4aa949851ec17cc
SSDEEP

12288:lsPQh6SEANr9CgjCHOf2bRuG2uy9K/J+7cPPPbzBzi/hdtTJq:l7YurkO0R49uJ+IPr1z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6c97f943314d95f62fa8e2401e06f0302b971d4ef4b58afc082f69674a668bed

Files

6c97f943314d95f62fa8e2401e06f0302b971d4ef4b58afc082f69674a668bed
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

uBrO.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 675KB - Virtual size: 674KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ