6e2c2c76e911761aa2beec71ccbd2a11cf288db3f4158000a0e9c8ed0f907960N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6e2c2c76e911761aa2beec71ccbd2a11cf288db3f4158000a0e9c8ed0f907960N
Size

41KB
MD5

2f9f878b6cf95dcad3656104c6900250
SHA1

597803156441f5e26da0c04f07906e13da768b81
SHA256

6e2c2c76e911761aa2beec71ccbd2a11cf288db3f4158000a0e9c8ed0f907960
SHA512

52718a4506de0461c91956fef7dfd360f4e4524c42ccd3b577312ca15a59ffebc3f66c42d62663b93221464b20ae56e8bf9449f2711d0a70a7d13eee7485aea5
SSDEEP

768:6NdC4dOdW6DaEWyQNb8+i15fS2rEk8IdF3icvbbELX+bUwQZfhzi:6NdC4dOUxEWyQyK2bdCL+nQp5i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6e2c2c76e911761aa2beec71ccbd2a11cf288db3f4158000a0e9c8ed0f907960N

Files

6e2c2c76e911761aa2beec71ccbd2a11cf288db3f4158000a0e9c8ed0f907960N
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\dnsrv\sdktools\unicows\godot\obj\i386\unicows.pdb

Sections

.text
Size: 228KB - Virtual size: 228KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ