6befc4788cb4c7973ea49449643c0ad954fc532c89414fdbc6a31c7e9985d293 | Triage

Sharing

General

Target

6befc4788cb4c7973ea49449643c0ad954fc532c89414fdbc6a31c7e9985d293
Size

3.4MB
MD5

4589917f63adae8613e51af19b2f5336
SHA1

67e36b556db3ebb6bae928faa337e16f166a4158
SHA256

6befc4788cb4c7973ea49449643c0ad954fc532c89414fdbc6a31c7e9985d293
SHA512

bd7186e36c4881d30339c6bb552d14939cc8ed305b35822d383ec06c11c6d0443ed773512e1a13cd82df6b5413689a8ef50c73c14e9368b2e1fb09bd75c56a99
SSDEEP

98304:NEUlaUYw4OdbfbMiDMf/6Q9Sau4m79/RXUan9SaL2KE:iU0g4e7LM36Qc4sX7Mw2D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6befc4788cb4c7973ea49449643c0ad954fc532c89414fdbc6a31c7e9985d293

Files

6befc4788cb4c7973ea49449643c0ad954fc532c89414fdbc6a31c7e9985d293
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ