d66eeffc9970d98d9616fec9fd1dbc13 | Triage

Sharing

General

Target

d66eeffc9970d98d9616fec9fd1dbc13
Size

1.2MB
MD5

d66eeffc9970d98d9616fec9fd1dbc13
SHA1

4a882da2ff911d619fdc7657de7c5f340e26dc16
SHA256

a7a9862d23e22441e303676f535d34f64ac5eefdcda2c3ba8b09e2908bb4230b
SHA512

f85f290d9c76ef5c7c57018d45fe8298caabd5b5348b2d9022ce0f025a477465bfb29f6bcab9ac771ae2004f29ee7770440fd3f4ad5a7f1a4a3f32f5507e5adb
SSDEEP

24576:RLRJrPNrRO+VtQekLIPsaVIHGq7Su+uGCYTClWmAIKKBJYOCABGpGGT:RdJrVV54Gq7yuGolGUGT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d66eeffc9970d98d9616fec9fd1dbc13

Files

d66eeffc9970d98d9616fec9fd1dbc13
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 576KB - Virtual size: 575KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 56KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.enigma1
Size: 216KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enigma2
Size: 260KB - Virtual size: 260KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE