66561e16685b0c4d6c4ec4f6c4d5749a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

66561e16685b0c4d6c4ec4f6c4d5749a
Size

43KB
MD5

66561e16685b0c4d6c4ec4f6c4d5749a
SHA1

e9a9efd1ddfe18f7d3e50c8c91f4fdc7937a7ce3
SHA256

e16954476ae41e5332a58218b3bcb0b2f480c62c29872543a1063fa428af3c53
SHA512

b9ae6ff1db8ca56e37b3ff95e375755169bc82ea13e594709ccc59ca2d65cae1d2ef521c4a991d3b049e8a61c559ec2154968b5c8c6a676ed228f0426047439d
SSDEEP

768:eBEYPvIpz7onYL5h8iniVkKEF3VHO+eTCNFcR+jxv0Ec00a:eBEYPvqztHiGFF3VuxXkjxv0EU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
66561e16685b0c4d6c4ec4f6c4d5749a

Files

66561e16685b0c4d6c4ec4f6c4d5749a
.exe windows:5 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 39KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE