66b7d12b3a8ea_5k[.]exe | Triage

Sharing

General

Target

66b7d12b3a8ea_5k.exe
Size

411KB
MD5

4bead3a1a9683a320959d1f0704e5c62
SHA1

938015c08e0862ce5380c2a5953e2b8700b636ae
SHA256

8e1628d8702e49c52d4fcb0df8f9872dc693c38e685243a0e0dd03594b899ea2
SHA512

035048d3df36b130c6497c342017714d2ace8d4cfc06adb5b511969f2373921f02294ed854edd64b1d54f82e138e6154220561aee3f2339a0be5c55fda597eed
SSDEEP

12288:0UVPgerhCT+SnR/on1QVk110E+fpnpTB:0UVYer86SnlMQVk1Ofp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
66b7d12b3a8ea_5k.exe

Files

66b7d12b3a8ea_5k.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\wmaogm116irqog\obj\Release\MSG.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 409KB - Virtual size: 408KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ