4b66e32d70ff82e60c3ae6b06b6ac3f3 | Triage

Sharing

General

Target

4b66e32d70ff82e60c3ae6b06b6ac3f3
Size

509KB
MD5

4b66e32d70ff82e60c3ae6b06b6ac3f3
SHA1

9c24f78d5fa0c92a8c36c99ec0361fa5e530c637
SHA256

7659e8c1108d312c458359a03bea08717c56609b27255e6f0dfd29779343d088
SHA512

4f5a27a688a6c33c5901435d6a6eeef0005339563fc665888de2c7f93060ea05ed9f56443f020992d7c85dd10cb924761d45b662ed5b3a6790d59beebda41410
SSDEEP

6144:5nGzJRBQZ6t9GSsZVmUfxPk7SW77HclS820DoNJFVY9UeR8CHbDCJ4MEWWXKIQTk:5nM6Z6t9wZY+qLFVd88antWMTQTk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b66e32d70ff82e60c3ae6b06b6ac3f3

Files

4b66e32d70ff82e60c3ae6b06b6ac3f3
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 365KB - Virtual size: 364KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ