69646[.]exe | Triage

Sharing

General

Target

69646.exe
Size

585KB
MD5

dbbb20480801a2ae3e9c14defc69fe11
SHA1

57b1bb736d7d7c1e0d81a29a894a2cd10da1ebe0
SHA256

978a959c5131f0e37d076b6a2b777c35cae4f58756a3d25be2662e58301f0ebd
SHA512

fb23297e7a346392ee76dbc20dd1ae598346220956dccfe2be42dfb016ab3ecbfe41f74fdcc6abeedaa040ead2ad82287ad4c2b4dab7b507895a6cc7d6b2ee12
SSDEEP

12288:OUtPplTY6RhKu0kQTPx/jlbdU+Q9R7puEtuopTz:OUJTDEMoxbSpu/oRz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
69646.exe

Files

69646.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 576KB - Virtual size: 575KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ