668f11e15aa755a9e92a5567e52d7465901819779d04d3b4e90de7c162394a44 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

668f11e15aa755a9e92a5567e52d7465901819779d04d3b4e90de7c162394a44
Size

467KB
MD5

4dfa679c1282a9ca726df71135a06668
SHA1

f73529e06324030b82fb48d9497981abf4603b4a
SHA256

668f11e15aa755a9e92a5567e52d7465901819779d04d3b4e90de7c162394a44
SHA512

fae72374e16ac2e3ef73211e4ab36d9c1ab5e488e80a0abd644113b911a47074986ba70a5e9c23036c5af0917c04bdd0cfaa8d5411d56ffd76cd88b050661580
SSDEEP

1536:f9CX0I/VB0zZSwURnvuS0D2BnHZSOK524F5AgaV1Or+DUk7U4fy:FC02SSwwY8WHXAg+1OC7r6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
668f11e15aa755a9e92a5567e52d7465901819779d04d3b4e90de7c162394a44

Files

668f11e15aa755a9e92a5567e52d7465901819779d04d3b4e90de7c162394a44
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Prey\PreyDump\obj\Release\PreyDump.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 462KB - Virtual size: 462KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ