66aef8cc97f49451d84c1e3debbb8fc9e4cd6580fa8a9351f8fa9f602c4809c4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

66aef8cc97f49451d84c1e3debbb8fc9e4cd6580fa8a9351f8fa9f602c4809c4
Size

2.0MB
MD5

c76bf631a44b558a926685b3ee52539b
SHA1

0dad285306304dd073f61da13ee04f8f4cf47816
SHA256

66aef8cc97f49451d84c1e3debbb8fc9e4cd6580fa8a9351f8fa9f602c4809c4
SHA512

eac91860f7cf8c459c9b8b26e55687784fcf3594d14371c08d386a4949d094f0c80f804de9033fc0973d3b11dc9bcd04bdd0d9bc12753e8b17be2daa8bc46c13
SSDEEP

24576:UdJb5hpKgYWoMR42tR24Forp88WTgWjqEfp68QFamXwLO5rHLe0SWio2KMgZVil+:A3UMPu2vgWjqEfoXRPgl+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
66aef8cc97f49451d84c1e3debbb8fc9e4cd6580fa8a9351f8fa9f602c4809c4

Files

66aef8cc97f49451d84c1e3debbb8fc9e4cd6580fa8a9351f8fa9f602c4809c4
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 8KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 450KB - Virtual size: 449KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ