06716299[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

06716299.exe
Size

597KB
MD5

a5232220175f229a396fc36ad623a004
SHA1

422879a7c30ff04199c9fb31905d090646bc5217
SHA256

ab5432315ab5e547d7e2aa8f3678009b20511ab1d7cf4e7133a45e543fca9594
SHA512

311dc15d88299828a3b4b5db83acd610542e2a479968634a7eef1e886e9d377b16604a973404d6299703e2ba6358b957ea03a4bd5237d8ad9792c4cbd716ebd1
SSDEEP

12288:Bj0mzZBEP85uQ6QRs7o6ZtP0kpO49l9+Ih3Evm6U+q48vAdUPs6FurGKa2h7b:v9BEP8Peo6Zt029XE+9bvAdYs6crGKam

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06716299.exe

Files

06716299.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 595KB - Virtual size: 594KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ