66702e21faa38c24f49a33112d2036d8f3b6bcfd686db47299a4dc44dedf13d8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

66702e21faa38c24f49a33112d2036d8f3b6bcfd686db47299a4dc44dedf13d8
Size

221KB
MD5

2024864d95a139a940a31c176e6c457d
SHA1

a5f70465af97145e1f953eca52dfb425c1f1cf25
SHA256

66702e21faa38c24f49a33112d2036d8f3b6bcfd686db47299a4dc44dedf13d8
SHA512

7ad00ec8b5216cf7a620237fc3db2bf5067f3f830edb797dc147181f7c57af6b731ad1ad423073509dd1e1c0961e3c0756191f26732d96cef691880abfe9e618
SSDEEP

3072:8+BxDzRuGDFzpbs6A6zRB39woj/2BOFNSKo/NDJmte+TQg1y2ll/UztIBQAf/EJP:duGTTR+93/N1N+51yEb0j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
66702e21faa38c24f49a33112d2036d8f3b6bcfd686db47299a4dc44dedf13d8

Files

66702e21faa38c24f49a33112d2036d8f3b6bcfd686db47299a4dc44dedf13d8
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 215KB - Virtual size: 215KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ