66d92be427b264c0ef8f9fa243d8d955 | Triage

Sharing

General

Target

66d92be427b264c0ef8f9fa243d8d955
Size

460KB
MD5

66d92be427b264c0ef8f9fa243d8d955
SHA1

4322c380017f5ae7009e3207241c4627a89d8241
SHA256

80cc15a8b388c261ecafb2253049f5e536137c155f261d898ccb1a0247404566
SHA512

1e289830154c33016c4cfd0d8ead128a7e976656c4524edde3bd2b71f579462502a36994aa09c262b5ebdeb0a85c782d7cb8aa410be3fe4ea114e9d176af522c
SSDEEP

12288:etjgtAAt81/9AraGOGkcr/KbA50aDe4DGJvp1OmE6/9yEewN6Y7zodhgh+oKW:eKtTa1/9A2GZr/c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
66d92be427b264c0ef8f9fa243d8d955

Files

66d92be427b264c0ef8f9fa243d8d955
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

]c3]
Size: 233KB - Virtual size: 232KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 154KB - Virtual size: 154KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ