66c652dcc4d3d35af109565c5b90e02fcf21e382e3562ddf044a03b6f8119cf7 | Triage

Sharing

General

Target

66c652dcc4d3d35af109565c5b90e02fcf21e382e3562ddf044a03b6f8119cf7
Size

692KB
MD5

9b49514378fdcef408f64c92acf3ade4
SHA1

434bb40d4486c2086b7fbecf308ae8a0afb5779d
SHA256

66c652dcc4d3d35af109565c5b90e02fcf21e382e3562ddf044a03b6f8119cf7
SHA512

98162ae8c784f27e76b6954227bd69873e03b1e1d9d007e47770e9e59c365eb7a54fbde5d97fe5810c0a91f8c4c2af91df3396db59ecfea72d5268df6a556443
SSDEEP

12288:3+Dbg/B778QeLz2Y58Iocl2xBTtqeJGl4gI9KgVEIUUSH8UwrdS+sM92:Gg/BY2hJclKBMmKgWQQ8UwIlM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
66c652dcc4d3d35af109565c5b90e02fcf21e382e3562ddf044a03b6f8119cf7

Files

66c652dcc4d3d35af109565c5b90e02fcf21e382e3562ddf044a03b6f8119cf7
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Tppq.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 690KB - Virtual size: 689KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ