066a9433b5d0c051f5b0f28eeae95f3e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

066a9433b5d0c051f5b0f28eeae95f3e
Size

184KB
MD5

066a9433b5d0c051f5b0f28eeae95f3e
SHA1

a0f31be90badb67e6a9a75f6d9341c15154ac21d
SHA256

28139d305f74edc18496c6919c6c695a3fc2d681a520f1a8b7575b4ffca3d5b3
SHA512

ce4ff4af2c7e33679c8822de46ac75f31098c5528b8810844cc76190749e6d45dfc9d032fe4294c19957edfa6a152a1af2b86b58f97517fe85009c346b8251a7
SSDEEP

3072:4QR61JOq1Jn8WliVUWUnI1VCciTt+RnntiHe+BC3K5eq0:4l7rgSITC5tMtfK70

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
066a9433b5d0c051f5b0f28eeae95f3e

Files

066a9433b5d0c051f5b0f28eeae95f3e
.exe windows:4 windows x86 arch:x86

7d9856d013d3ce5aca8b13b6ca8e8cb8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WinExec
GetModuleFileNameA
GetTempPathA
CloseHandle
CreateFileA
GetVersionExA
Sleep
GetStartupInfoA
GetModuleHandleA

user32

ShowWindow
TranslateMessage
DefWindowProcA
RegisterClassExA
DispatchMessageA
CreateWindowExA
GetMessageA
PostQuitMessage

shell32

StrStrA

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
srand
time
rand
fclose
sprintf
fwrite
fopen
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_strlwr

urlmon

URLDownloadToFileA

shlwapi

SHGetValueA
SHSetValueA

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 140KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ