669a333b2136d4f09e1369be59a8b6ce | Triage

Sharing

Copy URL Twitter E-mail

General

Target

669a333b2136d4f09e1369be59a8b6ce
Size

388KB
MD5

669a333b2136d4f09e1369be59a8b6ce
SHA1

dd987d507c314dbf469e1e62adbac8aa6dbc2d8a
SHA256

baab72c3b61d1885c4c457ba9e599666c5994d2ae2a17e72c490cd7881159ed5
SHA512

d680f4a34721bf4cccbf4c841752959808cb8b4d0edf3d771dd3b4916a335632082d992bb5de821f0ef1e060b766247d2db0d1d67df5ed7bfef4a4454a5f83ca
SSDEEP

12288:UVzO4VLndU7ULwHVc4wcYqbtotj3rBkhwjtTMM:54ZwUWcYoh3rB2ewM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
669a333b2136d4f09e1369be59a8b6ce

Files

669a333b2136d4f09e1369be59a8b6ce
.exe windows:4 windows x86 arch:x86

dae2264e721d7c66f7fa35e864d11aba

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA

Sections

.Kaos2
Size: - Virtual size: 832KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Kaos12
Size: 383KB - Virtual size: 384KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ