663a9b6fd83eeb7f54a8eaa286b811d0200ebb8d891c399cd914edd3036a86c6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

663a9b6fd83eeb7f54a8eaa286b811d0200ebb8d891c399cd914edd3036a86c6
Size

5.6MB
MD5

49009e135d98ebe39b84a722b412ee05
SHA1

14cff880c8c789bb86aa4d8a293b881eaef1760a
SHA256

663a9b6fd83eeb7f54a8eaa286b811d0200ebb8d891c399cd914edd3036a86c6
SHA512

de25b7fbb24c29ce66550f91d7caa05f0aeae2bf3e68c56a62491db2dbb6195ca95899b19f34daae67fb6e30185e6e920e9dc168e8b2bc31fc0c9929a7a702c0
SSDEEP

98304:9iRmxZFsM4kxzDcT+GcY437KvDwEHuujlsaSzsC0p43MpQdZ9nc+fsCb+oSBAON6:kRm1syxacY48eda2TMpQdZ9nc+fyhNjG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
663a9b6fd83eeb7f54a8eaa286b811d0200ebb8d891c399cd914edd3036a86c6

Files

663a9b6fd83eeb7f54a8eaa286b811d0200ebb8d891c399cd914edd3036a86c6
.exe windows:1 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 97KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ