659165d28b115cd68f32f87f8e7508d020feea65b6c6c5c22c070db07b9b8e70 | Triage

Sharing

General

Target

659165d28b115cd68f32f87f8e7508d020feea65b6c6c5c22c070db07b9b8e70
Size

2.6MB
MD5

3263c371368846408167fc5b0cfc05cf
SHA1

746bf5ed8ffa8e0d6fc8a07f72a5c4420e0f764a
SHA256

659165d28b115cd68f32f87f8e7508d020feea65b6c6c5c22c070db07b9b8e70
SHA512

a4a56467f93dd57d93647f1704cf1f3ddc77a195891c8b3b948ef065cec8da0ae7313c3e996708986160322bf6492bbc4373487d04caab25ae8973886c0fca3d
SSDEEP

24576:e023i5i8AsJWOqxpS/ndnoc6Esah0ugN7xlI9ZzPXEn9OeBicrW1xII1IoGt6BK8:R23wicWRpYndnFETMZzPUnWXhEu/OSn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
659165d28b115cd68f32f87f8e7508d020feea65b6c6c5c22c070db07b9b8e70

Files

659165d28b115cd68f32f87f8e7508d020feea65b6c6c5c22c070db07b9b8e70
.exe windows:4 windows x86 arch:x86

2eabe9054cad5152567f0699947a2c5b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

lstrcpy

Sections

Size: 4KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

dgcakkrb
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

hhqkkmig
Size: 1KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.taggant
Size: 8KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE