661c0f6aa0ff8345c784164c680c6a86 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

661c0f6aa0ff8345c784164c680c6a86
Size

880KB
MD5

661c0f6aa0ff8345c784164c680c6a86
SHA1

0ef4e58dda3bdf16fd43daeb064f4178dc6bcf46
SHA256

ca83309581aa929123979ab42d9cd6f4e7ed1eb499f6d7d425c1115a24acc41d
SHA512

d4e69731e9ac472d41c85a5a3042f6f4d67de80738c0635d23c30ea987061dfdb0bc484d42a762a8fd263f5718ffc4636bb657b329a5472c299ce7a7bd205c3c
SSDEEP

24576:wPHIUAywJ7xwFZ9JjrWG94lITqFSBa1ru4F5U:wJAywJl0fdWGEITqFea1ru

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
661c0f6aa0ff8345c784164c680c6a86

Files

661c0f6aa0ff8345c784164c680c6a86
.exe windows:4 windows x86 arch:x86

cde76f0f74b161148cd21b98799b5cbb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetCurrentProcess
CloseHandle
HeapCreate
CreateFileA
RtlUnwind

user32

SetWindowLongA
wsprintfA
CharLowerBuffA
CreateWindowExA

advapi32

RegOpenKeyA
RegCloseKey
RegCreateKeyA
RegEnumValueA

ole32

OleRun
CoRegisterClassObject
CoCreateInstanceEx

Sections

.text
Size: 106KB - Virtual size: 284KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 629KB - Virtual size: 930KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 27KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE