6679a157968488d2f8af8206da59398882810f62b27ac2cf21b781a36d4b5e40 | Triage

Sharing

General

Target

6679a157968488d2f8af8206da59398882810f62b27ac2cf21b781a36d4b5e40
Size

887KB
MD5

8f4ca87cc028e9a6479df77f44ddfc55
SHA1

3cdcdc3bb8f263f2682559569f7383437f819b6b
SHA256

6679a157968488d2f8af8206da59398882810f62b27ac2cf21b781a36d4b5e40
SHA512

d0b6de3227409c66c7f9c867bde969f61bc5124dea17b508684505378ba75d1ffa5f6efe177d5f246a2f0a6f475cc7428d5efa6b48ec009e5b8fdcff0679e8fd
SSDEEP

24576:pAzTNJKOtfxLmn9JzIp0EJPQE2uC5b6ek11g+Yx6q9Aj:k8M0t3uCHkk+YxM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
6679a157968488d2f8af8206da59398882810f62b27ac2cf21b781a36d4b5e40

Files

6679a157968488d2f8af8206da59398882810f62b27ac2cf21b781a36d4b5e40
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 867KB - Virtual size: 867KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ