c99ebb7a5c0c33f0ebf077b11e0724cdfd602610e5a3961535f3e1c6ea7d3cf2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c99ebb7a5c0c33f0ebf077b11e0724cdfd602610e5a3961535f3e1c6ea7d3cf2
Size

648KB
MD5

57c83f35769c3936c33ef24920a68b0c
SHA1

38a106a11241c052ed191980b48b6b0a3654720c
SHA256

c99ebb7a5c0c33f0ebf077b11e0724cdfd602610e5a3961535f3e1c6ea7d3cf2
SHA512

64321933cd56a88544bffe72cd8e2560cb27844be86bf574e64efd3ba7155c0b64a7980c0deb0c27ede37d02c08547e867aaee6f9721c6aa63f644fedaa33519
SSDEEP

12288:OtFtImAFHY61ta2DruM6v8ZILqiC3e1f3aZCqGXdMRmmJ8JQEXxPtc4BtEDDuU7n:+61FH/aOruM6vNLC3y4C9Jm6JQixNBts

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c99ebb7a5c0c33f0ebf077b11e0724cdfd602610e5a3961535f3e1c6ea7d3cf2

Files

c99ebb7a5c0c33f0ebf077b11e0724cdfd602610e5a3961535f3e1c6ea7d3cf2
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

hPTW.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 640KB - Virtual size: 639KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ