66f238bee24accb1ff6c4d1544900d47 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

66f238bee24accb1ff6c4d1544900d47
Size

257KB
MD5

66f238bee24accb1ff6c4d1544900d47
SHA1

90c4152a72a0897e97580cd813a6473e727cb551
SHA256

e81ae1cdc2f4d913e40acdce5c2919781c2d2ca7c1dfd5dcd05a5fb7b949d87a
SHA512

955ea3a278ca27e47114e7b98b78a9736da1d0219d8c9517ccce069b896b907d812952bb098eb82e8364e4379b8af3654b57281eab24444a650adec5c667cd38
SSDEEP

6144:smZE0KvvcUNplimpFHJTcProE9L8/rwKNCc:smy0GvnzlHpFHJTczoE9LTK0c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
66f238bee24accb1ff6c4d1544900d47

Files

66f238bee24accb1ff6c4d1544900d47
.exe windows:5 windows x86 arch:x86

563d9165e4e3a707049aa8973ca899a7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

shell32

ShellExecuteA

ole32

CoInitialize

oleaut32

SysFreeString

advapi32

RegCloseKey

user32

wsprintfA

shlwapi

PathGetArgsA

ws2_32

send

netapi32

Netbios

Sections

.MPRESS1
Size: 255KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE