c6083ff4f5379784d6ced993c3a35f553dcc078f56b02e074096047176347001 | Triage

Sharing

General

Target

c6083ff4f5379784d6ced993c3a35f553dcc078f56b02e074096047176347001
Size

1.7MB
MD5

2087ee17a14e08e28b58ee89cfd5f79d
SHA1

d18c6cb2a50c211397c915d388af39bebf48029a
SHA256

c6083ff4f5379784d6ced993c3a35f553dcc078f56b02e074096047176347001
SHA512

8800fa619e02cfc4a7d41da263c03968ce2e1752294022f5fad43de8429e039f8d38bb096aa2a63ecb0bb2d9fc785f5fb417ea9afa6fd763145035962222cc50
SSDEEP

24576:gCypJyhqmrRGobWskh49boR+Dn8wYDXyXngh2kAwP2HjGcfGlPn4RCtOuHWtl7kN:gCqchI93gk0xYD6kT+HJAPPHWzhL7Nk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c6083ff4f5379784d6ced993c3a35f553dcc078f56b02e074096047176347001

Files

c6083ff4f5379784d6ced993c3a35f553dcc078f56b02e074096047176347001
.exe windows:4 windows x86 arch:x86

2eabe9054cad5152567f0699947a2c5b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

lstrcpy

Sections

Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 2.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

nztisjhq
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

sgruvgtz
Size: 1024B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.taggant
Size: 8KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE