66daf7608542e0ef72f850d36194727b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

66daf7608542e0ef72f850d36194727b
Size

120KB
MD5

66daf7608542e0ef72f850d36194727b
SHA1

4d1619d2448e65eee018d7a66b973a780a6e8868
SHA256

c6e09a740a55bb91db252abfb11a998a398eeed0ab3945ffd15c360101677248
SHA512

d1681bdcc934cd3cf5686dbad4837d389f3ef717d3e1d40080098d6d32b2bd1bff41fea437c133278868206366ac993e03e412f9fb8f27218d354d247a68b24a
SSDEEP

3072:8qeS39NdFNeM4R45dtXjPIwkfYm24Cyx15afkK4cEALK0V:8qeSvnRd5Qwk1CyAkU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
66daf7608542e0ef72f850d36194727b

Files

66daf7608542e0ef72f850d36194727b
.exe windows:5 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 105KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE