f66c2e249931b4dfab9b79beb69b84b5c7c4a4e885da458bc10759c11a97108f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f66c2e249931b4dfab9b79beb69b84b5c7c4a4e885da458bc10759c11a97108f
Size

243KB
MD5

8a7f22735b0a4c62e962b2e100cfbe43
SHA1

d823c7eb8ec28458e72af5a7717497ea109df087
SHA256

f66c2e249931b4dfab9b79beb69b84b5c7c4a4e885da458bc10759c11a97108f
SHA512

bcd9da42c2d4d7cd37d2f938d7d5ca5ca1c8d4ad52de7f57557792652ed662350940a58cf02f7e3258d9b74ee154587353bd68a26deefed38701916b5a16bac7
SSDEEP

3072:/tjrQYPixljaVKEgT5JrzfRVs4Yzn2gVv2k2c/TJ0GF:FfeaVKDdJPfRVoz2gVvj2c/TJ0G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f66c2e249931b4dfab9b79beb69b84b5c7c4a4e885da458bc10759c11a97108f

Files

f66c2e249931b4dfab9b79beb69b84b5c7c4a4e885da458bc10759c11a97108f
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 134KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ