66956ebe8261e9d4de4f2dca09fb5631 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

66956ebe8261e9d4de4f2dca09fb5631
Size

184KB
MD5

66956ebe8261e9d4de4f2dca09fb5631
SHA1

cbf7393844ead8f85a39e9b0a4c6d5bdc85db318
SHA256

3ca284fd8aa420b40cd8214c7a2b84c04117be21d4fcd52d3c8886e1fe61927e
SHA512

665fe2654f2a845a889a62132ffb93e7d0c05bf3eca75bf436321cc7d83b329812a0f0f6f24b25e6e03a375688c76297f08f54e76d890e9ff191737270c86f30
SSDEEP

3072:0ZfSor+BoToEvY32GhNvmzqHv4crR0oXhm6:0ZfSM+BkO2GhNfv/z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
66956ebe8261e9d4de4f2dca09fb5631

Files

66956ebe8261e9d4de4f2dca09fb5631
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

v[t{D(
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 81KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ