66955fa354d664def4cf8a1a58a34602 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

66955fa354d664def4cf8a1a58a34602
Size

100KB
MD5

66955fa354d664def4cf8a1a58a34602
SHA1

48fa4b147168799dced8b1b1f9b7ec5a9d015ad6
SHA256

7bfea47e9848fd9e5a789ba0e9af5f0722f208e4ed87294760583bd9b83ad7d0
SHA512

b79a7adab148ed79cda9f35a41644b298b8d7cf32875b5104e2c1e26110dfffc72335186d9ec6ba0aa77e58858478634089c0b48701a64004b59c483a0aa13e5
SSDEEP

1536:91hRjsX9ALlNfmg6aBNrS1BbCfQuzzo4sInuWK/+YrX1u9N4XdxsEAnl61ff:93RAeLkaBNuor/brFYL18XEz1ff

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
66955fa354d664def4cf8a1a58a34602

Files

66955fa354d664def4cf8a1a58a34602
.exe windows:4 windows x86 arch:x86

de6fdcdc7f4ad649a7529bf91b3c3b02

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

ws2_32

WSCInstallProvider

Sections

.code
Size: 95KB - Virtual size: 320KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE