66cc4df43c6e417f19905ce9abf2ee8b[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

66cc4df43c6e417f19905ce9abf2ee8b.exe
Size

436KB
MD5

66cc4df43c6e417f19905ce9abf2ee8b
SHA1

f31a80f3878f1014215192ff6db4eb37dfe9dfb8
SHA256

33786e57eaf32bddf2aa35612521be459e356e81a1aec6f7bc69759d16f4147a
SHA512

2037f80b30f11a63a26e54877071632027827803041ecec10725efc1db107d5598deb5ccd14112cef8fd5d6675014b99fa646c91d7da28cfa0c502cf3886fe22
SSDEEP

6144:3p7/cOLYVXaEe3+LwTAzkw6WwEfHlTtnbH9CBcKTVF4+ItQlYCLI/xzSLrVM0GC3:35wVqIl6Ww8H/dOXVWLtI627i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
66cc4df43c6e417f19905ce9abf2ee8b.exe

Files

66cc4df43c6e417f19905ce9abf2ee8b.exe
.exe windows:4 windows x86 arch:x86

8e1de50309657f6bebae82463c5f928f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

recv

ntdll

NtWaitHighEventPair
NtNotifyChangeKey
RtlUnicodeStringToAnsiString

user32

GetForegroundWindow
GetDesktopWindow

Sections

.text
Size: 433KB - Virtual size: 436KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 181B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE