cb6fde4f52829c9db2ef669ed3f86f037c8039176c4d17bafd2efd9d6d365628 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cb6fde4f52829c9db2ef669ed3f86f037c8039176c4d17bafd2efd9d6d365628
Size

1.7MB
MD5

70a0e8f13dc6794356fd0647b94b2f77
SHA1

024b88d70f6c1ef06e46530bc3227b8015272076
SHA256

cb6fde4f52829c9db2ef669ed3f86f037c8039176c4d17bafd2efd9d6d365628
SHA512

996cdd6167444c07212ae8e880dfd8d0d6e4677b19683640731667fce0a749fa5481362e8c1bd4e9729cdc0cc42bebc72e894d14cb891ed05455f9a688b608db
SSDEEP

24576:B2lmcN6Sxgzgi1o2KGTzZsNa5SRBOe/WT9lLz3q:s6AI+SxT9lLz3q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cb6fde4f52829c9db2ef669ed3f86f037c8039176c4d17bafd2efd9d6d365628

Files

cb6fde4f52829c9db2ef669ed3f86f037c8039176c4d17bafd2efd9d6d365628
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 120KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ