661cf7862181fdb9ae19c598a448297d | Triage

Sharing

General

Target

661cf7862181fdb9ae19c598a448297d
Size

860KB
MD5

661cf7862181fdb9ae19c598a448297d
SHA1

a2da5641be4aa32d77856939c2648edfc857cc7d
SHA256

942a4b8b89e8363c9546971d2d8f8573efc39ed8d672200e4565a3b84f690151
SHA512

fd3db6720b95a1b56a6ea548e6d407e0058d6030d601c43f7c1045a4e741a77cb0ec58bc2b17221ddd85fbd75a31f880d9049bd0afed76b5a08bc6e125db78db
SSDEEP

24576:T+7P8h5/KgwSDqXsAJwB2W77ao4qdxBIjyiq3rd:+8h5/QqmjJwLTfBoRo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
661cf7862181fdb9ae19c598a448297d

Files

661cf7862181fdb9ae19c598a448297d
.exe windows:0 windows x86 arch:x86

204693aa89ecdf15c4c069c311cb6852

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

advapi32

CloseServiceHandle
CloseTrace
ControlService
CloseEventLog

kernel32

GetModuleHandleA
CreateFileA
GetLastError
WriteFile
ReadFile
GetVersionExA
ExitProcess
CloseHandle
GetCurrentProcessId
GetCurrentProcess
GetCurrentThreadId
TerminateProcess
CreateThread
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime

Sections

.text
Size: 289KB - Virtual size: 292KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 554KB - Virtual size: 556KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 716KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ