066fae946e184c94df98cad90fa4b4f3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

066fae946e184c94df98cad90fa4b4f3
Size

3.3MB
MD5

066fae946e184c94df98cad90fa4b4f3
SHA1

955e8b3a0e308530775e3a1f9268bd8d1507573f
SHA256

fc16f6440d0531f7deefe2c123f8e55c57f9723a1101948ae9879532dfc0dbad
SHA512

f58a9d6ca6087bf084f0a216674a6f765785fdd25210f45039b7e3bfd03a03255446b69ec54c413c32dd879850e64e64a986df4b2320c58340a76725b348f63c
SSDEEP

98304:GK/oQWfgZgVAp9XbtPZTpzwM7zK9Ov9c47/FCM:PAQ6gZgV0htPRpzZ/nVc24M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
066fae946e184c94df98cad90fa4b4f3

Files

066fae946e184c94df98cad90fa4b4f3
.exe windows:5 windows x86 arch:x86

a9a40a8f90483fa79b633b308d37f18f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersion
GetVersionExA
GetVersionExW
LeaveCriticalSection
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

user32

SetWindowPos

Sections

.text
Size: - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 284KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata0
Size: - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata1
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 239KB - Virtual size: 239KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ