664dac6990ac68d457c9af0fca8bab12 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

664dac6990ac68d457c9af0fca8bab12
Size

689KB
MD5

664dac6990ac68d457c9af0fca8bab12
SHA1

2a77f0dfd8288da33ad495ae54a3ca5bd6920916
SHA256

01515bce692ee3ff1c9602824a407e921b0b3fb26a5304151e3a8ddb5710c2a5
SHA512

b186218d2cfd805faeb022d2462fa3dabf38c7f215f1c98e013d4cc91529f057c94a62011b5af98bda8ce0a137be6b61ff028860b334e305cca5457ebd7000e9
SSDEEP

12288:M8VudlHBLRdxWAPf5eTOL3glZBRXjIjG8L2WLxGFaW:MMolBWAPf5eQw1RSvLxWaW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
664dac6990ac68d457c9af0fca8bab12

Files

664dac6990ac68d457c9af0fca8bab12
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 310KB - Virtual size: 310KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 101KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 228KB - Virtual size: 228KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ