a66bfda3d877a216665ebeb4ee3ba5a96d0094fdfd62bc8fe449b326fefc66bf | Triage

Resubmissions

22/08/2023, 02:28

230822-cyabashe78 3

22/08/2023, 02:26

230822-cw75jsbb8w 3

Sharing

Copy URL Twitter E-mail

General

Target

a66bfda3d877a216665ebeb4ee3ba5a96d0094fdfd62bc8fe449b326fefc66bf
Size

132KB
MD5

6ca97b89af29d7eff94a3a60fa7efe0a
SHA1

4778011bae38d7e82042397a057196eea8f2acde
SHA256

a66bfda3d877a216665ebeb4ee3ba5a96d0094fdfd62bc8fe449b326fefc66bf
SHA512

a36933631c89fef789f3cb3a8d5e50bd4520e5c80b1248a4a21e190a6c9c36ef67ffa7347aab5c2c49ef58e01717ee8ed134bf49b4f8d9b1afb2ed07831da300
SSDEEP

3072:vz6jbOpd4hhC8I1kRZKjLSbJ6mP4c5WP+aT:r6jEd4XXI1kRZKgJ6mP4RBT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a66bfda3d877a216665ebeb4ee3ba5a96d0094fdfd62bc8fe449b326fefc66bf

Files

a66bfda3d877a216665ebeb4ee3ba5a96d0094fdfd62bc8fe449b326fefc66bf
.exe windows x86

8012281525ae7645e4bef777e0869fd8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetProcAddress
VirtualFree
SetErrorMode
LoadLibraryA
GetStartupInfoA
GetModuleHandleA
GetCommandLineW

shell32

CommandLineToArgvW

msvcrt

__p__commode
__set_app_type
_except_handler3
_controlfp
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
strncmp
realloc
free
memcpy
__p__fmode
memset

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1018B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bin
Size: 128KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ