7666d369e301a38ef955eed7a3cc09629316209f549ee89560da0ab0c72359d6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7666d369e301a38ef955eed7a3cc09629316209f549ee89560da0ab0c72359d6
Size

5.4MB
MD5

6e52099411cff01bcc4f1ce2a62f0687
SHA1

4d7378bcb9d3f820600b6d46ba986f24641adb38
SHA256

7666d369e301a38ef955eed7a3cc09629316209f549ee89560da0ab0c72359d6
SHA512

6d40ecc65809810e1602bffbdaddba0a1e770c2f5f338869c2bfe63b81562bfdc965a56d1bc4ced00ef5101f1c9f3cca68d67033260af6012c4dfe07f328a7d6
SSDEEP

98304:fjhvVMLtUzlhKYyI1yHAiFOpxXUGPpRP0CJ:fjhvVMLteTyKl7VUMRP3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7666d369e301a38ef955eed7a3cc09629316209f549ee89560da0ab0c72359d6

Files

7666d369e301a38ef955eed7a3cc09629316209f549ee89560da0ab0c72359d6
.exe windows x86

89575be03ef731973561c45dba297bdb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThread
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

GetRawInputDeviceList

msvcp140

?uncaught_exception@std@@YA_NXZ

shlwapi

StrStrIW

vcruntime140

__std_exception_copy

api-ms-win-crt-runtime-l1-1-0

__p___argv

api-ms-win-crt-string-l1-1-0

strcmp

api-ms-win-crt-math-l1-1-0

fabs

api-ms-win-crt-heap-l1-1-0

_set_new_mode

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-crt-stdio-l1-1-0

__p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: 173KB - Virtual size: 172KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

34g30
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

34g31
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

34g32
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ