66181559f220bf5f158d145ccf3f601e | Triage

Sharing

General

Target

66181559f220bf5f158d145ccf3f601e
Size

63KB
MD5

66181559f220bf5f158d145ccf3f601e
SHA1

3d5c6888c8cc45b616b9001174a925890fce0c42
SHA256

16a218140984b2234c7ff62789ad3c5c60e7517b02b377fa69a6a611f44c4543
SHA512

3baa8d5be173fd0f508daaf977c32d1c0b394230af633c38e43cff95cc1aae3baaf9d64e1ec417f1a3160ce7bd9b531bd3323491dad3e018b29338c9511e9c68
SSDEEP

1536:HfSSSjOfVC0g1jEA1b1GFaoKnuwZPyzc9MD4v4IpWZou8nWIf2E:HfSSSXJ5hZPOk5c18n3fd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
66181559f220bf5f158d145ccf3f601e

Files

66181559f220bf5f158d145ccf3f601e
.exe windows:4 windows x86 arch:x86

f720541e8fe1f018ba315c74a7432373

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalWire
SetVolumeMountPointW
_llseek
GetCommModemStatus
DuplicateConsoleHandle
LCMapStringA
GetDiskFreeSpaceExW
EnumCalendarInfoW
InterlockedCompareExchange
WaitForMultipleObjects
GetPrivateProfileSectionNamesW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE