669cb1e860f14272648cf20738f456db | Triage

Sharing

Copy URL Twitter E-mail

General

Target

669cb1e860f14272648cf20738f456db
Size

275KB
MD5

669cb1e860f14272648cf20738f456db
SHA1

99d53931825be0bcfe96905c56f802787c66742e
SHA256

8598d7a6bc94e0b5253ec447b0817a1b46a72158e638dbd90dde3579f526e9a6
SHA512

965d1d063b4de96fa75557ff0059ff815e3722bfcc51a16bbe3bafe113dddb0e5d2d6e84cb8863c6238581ee1933914d3126514d87f5b68017d5019e67a9f6cb
SSDEEP

6144:sXjY7afISR7RIn+vjiJHF4bCzrlPu67XJ4THpyV:uj6BSR7RReJHC2r5u6SlyV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
669cb1e860f14272648cf20738f456db

Files

669cb1e860f14272648cf20738f456db
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.nsp0
Size: - Virtual size: 800KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp1
Size: 270KB - Virtual size: 272KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp2
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RPCrypt
Size: 187B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.vmp0
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 524B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ