666fcc4da8094a6da306486e434b19682226c72dcc89643ee6767f3710e40cc0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

666fcc4da8094a6da306486e434b19682226c72dcc89643ee6767f3710e40cc0
Size

698KB
MD5

5e93ba15b4ef60d2bd26be4b815acf20
SHA1

40b695103e590c3146b268e7c7fdc3f617bc74b6
SHA256

666fcc4da8094a6da306486e434b19682226c72dcc89643ee6767f3710e40cc0
SHA512

631f5519c7d47271ae01ec9f2a33f85a9889be5f246358f94669425366f3263f05a52c69eac53b9cca3bbd3138491edb7b7bb4568b0375f9b5bb81931270ea49
SSDEEP

12288:sHwg16efsEpQlUm6jBRMt5tpEAuK+2FszJIT+NoxejmAQGz1B6k7kYyZ:UVkbmRMtl/OXNoe6AJz1fw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
666fcc4da8094a6da306486e434b19682226c72dcc89643ee6767f3710e40cc0

Files

666fcc4da8094a6da306486e434b19682226c72dcc89643ee6767f3710e40cc0
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

aAyD.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 696KB - Virtual size: 695KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ