66bc87b4934b01b8d0e0739f4e726001 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

66bc87b4934b01b8d0e0739f4e726001
Size

353KB
MD5

66bc87b4934b01b8d0e0739f4e726001
SHA1

86f2075df5ce7e638e02ac1bdf6d871614a34b91
SHA256

dd69a7cfc26accdf5599dd1c4eab6948808b35affd91b21f1e19e757c6adc776
SHA512

03f06d5e3a659c4fd806e9eeb9d899a98479d9c1500a65a35007b34a03f8278394a8eb16c2ebf756fdf9081d0efa1f81866f6b93500e2f73524eac12af117539
SSDEEP

6144:S4cJDvFeKBw8v92A7BBRO0IMLPkuWCam408EHgFnnv/95Nci9sqd7+rsw9FB889I:i1Bv/RO0hLRREKgFv/vNci9xdKs4f88C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
66bc87b4934b01b8d0e0739f4e726001

Files

66bc87b4934b01b8d0e0739f4e726001
.exe windows:4 windows x86 arch:x86

81638d02019c0bfcaaf23a9c69f2f12c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileMappingA
WaitForSingleObject
CreateProcessA
GetCommandLineA
CloseHandle
UnmapViewOfFile
WriteFile
MapViewOfFile
DeleteFileA
GetTempFileNameA
GetTempPathA
CreateFileA
GetShortPathNameA
GetModuleFileNameA

user32

wsprintfA

Sections

.text
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 533B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4.2MB - Virtual size: 4.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ