66b1de83cb15723d6be69bbce464d23340752de75d0c59aab7775d67c930a2dd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

66b1de83cb15723d6be69bbce464d23340752de75d0c59aab7775d67c930a2dd
Size

591KB
MD5

13fce60d5610efc2dbe186c971a4c575
SHA1

72a8460afa0406bf090a81e11beb71610b3c1f9b
SHA256

66b1de83cb15723d6be69bbce464d23340752de75d0c59aab7775d67c930a2dd
SHA512

3d015ab5c37c9a354f8aec36bfd27cfa309a190dc0a0bf5f129240272613b7bfb5596a4b47f8657f0a9c41728d01c9e4a506c08cc2d5ca05c1df4f430a1834f3
SSDEEP

12288:ESqrjPswiIXgVTn/U87q+kn3exIBfH9Rinf0FXZAI19Z2FnsIuCEc2ugr:VQswiIQVTpqBOex5XZAO6nsIupugr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/تم تأكيد سويفت.exe

Files

66b1de83cb15723d6be69bbce464d23340752de75d0c59aab7775d67c930a2dd
.zip
تم تأكيد سويفت.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

hkmC.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 602KB - Virtual size: 601KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ