66ce68dbac0e4d77cae722edc05bf662 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

66ce68dbac0e4d77cae722edc05bf662
Size

42KB
MD5

66ce68dbac0e4d77cae722edc05bf662
SHA1

170b0ee0a3dcb8c06dc8ec0daaaec49d9f9ec64b
SHA256

e44a179dd1e38afc35a138c7dc55f239aa09ea5e18839e391aa0482538ae3f32
SHA512

b02e5f70f2ac8be22c8c336f63318d7f5399e711926c754f2d006c711e4fff60731d04b4788e24284aa46de4ae44bb97d91c69ba0688cf385da510b03180dd85
SSDEEP

768:7oDKE2X9uEsDo2CLvyn10yoXtBu+Ct+50RmGFM8q3iGKIDO1:7kd89uEZU613I2QmGfHGTDO1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
66ce68dbac0e4d77cae722edc05bf662

Files

66ce68dbac0e4d77cae722edc05bf662
.exe windows:4 windows x86 arch:x86

d50f8e31c6e6409850a148fbd7f4643a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

printf
free
_snwprintf
srand
_exit
_XcptFilter
exit
_acmdln
__getmainargs
rand
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
memset
sprintf
malloc
_snprintf
memcpy
strlen
atoi
atol
wcscpy
strstr
strcmp
strcat
fopen
fclose
_initterm
strcpy

kernel32

SetErrorMode
DeleteFileW
GetModuleFileNameW
GetCommandLineW
GetTickCount
MultiByteToWideChar
CreateFileW
WriteFile
CloseHandle
GetLastError
SetLastError
Sleep
GetModuleHandleA
GetProcAddress
GetStartupInfoA

ws2_32

send
closesocket
socket

user32

MessageBoxA
FindWindowA
IsZoomed
GetClassNameA

shell32

SHGetSpecialFolderPathW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ