66032aec342c85d912e0f682e61cc57e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

66032aec342c85d912e0f682e61cc57e
Size

271KB
MD5

66032aec342c85d912e0f682e61cc57e
SHA1

464dfe3c7583cc220b873d2907802e42b6bbfbef
SHA256

473e8c50cf9373499feaad7d20e43d6bbfd8dc6003b6a03d5f8eeee268ad3140
SHA512

4ae423d3e88873ae14f8afce831f2b5fb1a7fb2c01f65ad25a3461ecf696e057871249a2c2cd8d9143c4c0ef76f5d3d0efa1fb06d094369b6bd2e02f570ac4a9
SSDEEP

6144:jQqsvP4oaeNqL8v1wnLAfEZg4mLwZNWZ9sqkXW:IDaeoL8OEEZg5LwZYIqoW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
66032aec342c85d912e0f682e61cc57e

Files

66032aec342c85d912e0f682e61cc57e
.exe windows:5 windows x86 arch:x86

38492d76d703afb23c54fc5733eba1d5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemPowerStatus
_hwrite
HeapValidate
GetSystemDefaultUILanguage
GetProcessHeap
SetUnhandledExceptionFilter
UnhandledExceptionFilter
HeapFree
HeapAlloc
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
HeapReAlloc
TerminateProcess
GetCurrentProcess
IsDebuggerPresent

user32

GetClipboardSequenceNumber

advapi32

GetSidSubAuthorityCount

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 824B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 684B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 240KB - Virtual size: 240KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 352B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ