66705f34611c4230f5611add67d44f87d6b475d084db9957d9f12627f08567f7 | Triage

Sharing

General

Target

66705f34611c4230f5611add67d44f87d6b475d084db9957d9f12627f08567f7
Size

2.9MB
MD5

f81e5d818cddc604336ddca6261abccc
SHA1

afbc45f0f70e6530a916dca8578e306d5e097c7e
SHA256

66705f34611c4230f5611add67d44f87d6b475d084db9957d9f12627f08567f7
SHA512

da1eb90276e43d3f4987436a1dd224acac5e76437a62930c3616dc3bf6228b78612b89dbff82c9dfae80705beb9c2482b005147ed71f94a8b672978e268b4fc2
SSDEEP

49152:QRiTdrW76hGb+RnOnDI6SFZTNGPyX9anVILQ/hwNkqW/WeTHzWO5e2P+tpzXtxgy:Q4Td+2v6ETNgH/eNVJ4e2PGnXb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
66705f34611c4230f5611add67d44f87d6b475d084db9957d9f12627f08567f7

Files

66705f34611c4230f5611add67d44f87d6b475d084db9957d9f12627f08567f7
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 97KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.D7
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ