66322d55dbf3e47d4ff1fc5cb948f33d | Triage

Sharing

General

Target

66322d55dbf3e47d4ff1fc5cb948f33d
Size

5KB
MD5

66322d55dbf3e47d4ff1fc5cb948f33d
SHA1

8dd088bdf936574b57513fa2d630b7faddbeebad
SHA256

4d28a6641f735e19456f1ea4a371fb415ac038b9b7f01b85670895826455a1d5
SHA512

775df118eadbe0d17306a43bf5a7d162d66ed7f79e76a192651f2b50999f7c14be8b499beb9c782c5e2d2dd8e85a1844f508c39f5a4d35fd9941756058d0484c
SSDEEP

96:9Y6t5QCg2ykd8RNyLNHTdM39dNnIY2HOGi:1HQPwaNezdG9dNnIY4OGi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
66322d55dbf3e47d4ff1fc5cb948f33d

Files

66322d55dbf3e47d4ff1fc5cb948f33d
.exe windows:4 windows x86 arch:x86

03efb658cea1911d4dd54c300f296384

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameW
WideCharToMultiByte
lstrcpyA
HeapAlloc
GetProcessHeap
HeapFree
Sleep
ExitProcess
lstrcatA
CreateEventA
SetEvent
CreateThread
ExitThread
CreateProcessA
Process32Next
Process32First
CreateToolhelp32Snapshot
WaitForSingleObject
CloseHandle
GetCommandLineA
GetModuleHandleA

user32

DispatchMessageA
TranslateMessage
PeekMessageA
CreateWindowExA
CharUpperA
CloseWindow
DestroyWindow
GetTopWindow
MsgWaitForMultipleObjects

advapi32

RegOpenKeyA
RegCloseKey
RegQueryValueExA

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 268B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE