668e0b0ba11b3717396cccb7b4f72191 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

668e0b0ba11b3717396cccb7b4f72191
Size

134KB
MD5

668e0b0ba11b3717396cccb7b4f72191
SHA1

e06ed7367d2126dd75888dd463d887c1636803e4
SHA256

486fe06016d1acf96f3a3ddf6122ddb97fbe8543fddd43ff76e5131c2f780089
SHA512

e40c98bcb2ce5f48a4448a330d8ada958767eeed5dd6a8a9bff3d392de96a7c8204cff195d7849ded3cf01d9c1a28057d502190e1f5ff3db95121daa53282bcb
SSDEEP

3072:N7ipyI7zoy/JIb3QJGIj4VSZjAk5F+cIAtka/3:UfoyJGJSGk5F+c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
668e0b0ba11b3717396cccb7b4f72191

Files

668e0b0ba11b3717396cccb7b4f72191
.exe windows:5 windows x86 arch:x86

a56f115ee5ef2625bd949acaeec66b76

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA

Sections

.data
Size: 118KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ