a6a6cad52f790838dca0f625f830a8529d26481f47cd4ea9273361ee246ae879[.]exe | Triage

Sharing

General

Target

a6a6cad52f790838dca0f625f830a8529d26481f47cd4ea9273361ee246ae879.exe
Size

201KB
MD5

9f1255300e275f25013d90993b4e326a
SHA1

b2cf1e825fecab4b44a2bb21256d25229e459732
SHA256

a6a6cad52f790838dca0f625f830a8529d26481f47cd4ea9273361ee246ae879
SHA512

ea8502c08d2f06e828e401bfcee1702244a6594eadf95d159d5af9280a40c1adb0fd019f15aeb864538691247c6df5e11dd5ce86bafef5dd49f2f2eacac9a99e
SSDEEP

6144:o4DpCY2GhN5TMQEZckZOWf/XEX1Bl+DT6:oK2iNmQEdZOWf/cbl+v6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a6a6cad52f790838dca0f625f830a8529d26481f47cd4ea9273361ee246ae879.exe

Files

a6a6cad52f790838dca0f625f830a8529d26481f47cd4ea9273361ee246ae879.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\users\windows 7\documents\visual studio 2010\Projects\WindowsApplication1\clean\obj\x86\Debug\clean.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 196KB - Virtual size: 195KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 159B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ