66aac846ad0a79ceaa669df35a575be30b75be919e26442af55af634b0504669 | Triage

Sharing

General

Target

66aac846ad0a79ceaa669df35a575be30b75be919e26442af55af634b0504669
Size

3.2MB
MD5

efb22913c85a1dab034383b94b7dd449
SHA1

56bdcbf5380c202776e1f7aa08edc4a66d42c719
SHA256

66aac846ad0a79ceaa669df35a575be30b75be919e26442af55af634b0504669
SHA512

677af586682b04b591d7348f54e91bb61c664e77d097a34265067a18268ad6dd128b4165ed56f3b2ac4b409d29397e8303a6546bf2c724e77d7f5c882ce370cf
SSDEEP

98304:7F+S5fQ2KhTXHyq7CuLtbuFxkWeYbdoVJY8aQesjZ:7F+yJaCuZbexZhpm1Ze6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
66aac846ad0a79ceaa669df35a575be30b75be919e26442af55af634b0504669

Files

66aac846ad0a79ceaa669df35a575be30b75be919e26442af55af634b0504669
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 3.1MB - Virtual size: 5.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 58KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: - Virtual size: 564KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

petite
Size: 848B - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ