66fa661b1c8e76708e6e5859b1c4f876a3774c419e2b7cbebe46f3454a028fee | Triage

Sharing

Copy URL Twitter E-mail

General

Target

66fa661b1c8e76708e6e5859b1c4f876a3774c419e2b7cbebe46f3454a028fee
Size

3.2MB
MD5

9d775cd97b5f80b5e36321bcc88fe02d
SHA1

52b6a5d09ade78ffb9565a4e9f49ded746eef1fa
SHA256

66fa661b1c8e76708e6e5859b1c4f876a3774c419e2b7cbebe46f3454a028fee
SHA512

ff0de7d790a3231d634e8cf526ef75a0aa5faa34fb4cf7277b8c9fd6440c3f94e249ac065255ecaf8cce21226ab6cd9dc22baaee90a9baa39d4e66de29425927
SSDEEP

98304:1wVKuWgmfQV323lAJlLwWeQgtCYVMZfj4C:05Ngizw3C0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
66fa661b1c8e76708e6e5859b1c4f876a3774c419e2b7cbebe46f3454a028fee

Files

66fa661b1c8e76708e6e5859b1c4f876a3774c419e2b7cbebe46f3454a028fee
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 2KB - Virtual size: 2.0MB

IMAGE_SCN_MEM_READ

VProtect
Size: 615KB - Virtual size: 616KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

VProtect
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

VProtect
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ

VProtect
Size: 212KB - Virtual size: 216KB

IMAGE_SCN_MEM_READ