663EB_file[.]exe | Triage

Sharing

General

Target

663EB_file.exe
Size

1016KB
MD5

cfd6b4c3cc561d2776ce868f4ba72b69
SHA1

081ab7b00963433a521ee26ec231bcfa3c47f6c8
SHA256

0b0b2ba32fb5312ed77ae6925fbbdc872810de0e3566d5b04dbaace7e2f0dc68
SHA512

cdac60c82ca54213a2a42226653e89ff56fb4dc8f3379423acd4e91a74b67320cb788f8b427e23f871ce63da61bdcde691d17732051c6a4d05753a116bbe03b3
SSDEEP

24576:bLufVqijKZ7Svyl02t8wMBWvKVZLHo5nwe6QrkcJaEi0tg:bCfV9jK0yl026w2roC7CkcQELg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
663EB_file.exe

Files

663EB_file.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1009KB - Virtual size: 1008KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ