670ef3d185d5ac8989e1c1d5a77bbf0a277c708c132c61042e57e023acbb4059 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

670ef3d185d5ac8989e1c1d5a77bbf0a277c708c132c61042e57e023acbb4059
Size

2.7MB
MD5

8d85ee2b19f45d16a1a50e9b3ceb5df6
SHA1

78067e422b43a30cd3a5b281b82df21f8e4f37a6
SHA256

670ef3d185d5ac8989e1c1d5a77bbf0a277c708c132c61042e57e023acbb4059
SHA512

8fbd652e7ed9b19440365cb484ad20d4fc0b69c62d4a30e01bdf8d62d92e45ed935f6e489e872b10f92a98c6ba32dc5856c724138686e42189277e0abba1f960
SSDEEP

49152:YWl841riUylNUUYGu7GyggggMai5GP1iOXI2GSYBLfU2k:Ys32YXGu765Q1iRBxfQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
670ef3d185d5ac8989e1c1d5a77bbf0a277c708c132c61042e57e023acbb4059

Files

670ef3d185d5ac8989e1c1d5a77bbf0a277c708c132c61042e57e023acbb4059
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 606KB - Virtual size: 605KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 51KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21.1MB - Virtual size: 21.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 119KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ