66b4a4cc9e22ad77bb0bf458648453a9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

66b4a4cc9e22ad77bb0bf458648453a9
Size

180KB
MD5

66b4a4cc9e22ad77bb0bf458648453a9
SHA1

315611da701e078d7f527ccc5707a1924d88e7c2
SHA256

5dd7b771eec07291b1b07780cd77c7184782d378c8a23e8bd9f2bf64bd8827bb
SHA512

3d0affc34563944ffd781996bc827aa215f88329a61cf075444f0bf83add6de2ac44eb808ce8fbbcb3604aa8a5b5872dd0d940f8708069aae7b8028097725a10
SSDEEP

3072:uSVLsqurfK0CNbEFljPzUXinzarnYsSQffTGIZu5kTy0UqYcpb+RAO+L+ORc:NVLsNrir5EFdAXazazzniIZu5ey0Occp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
66b4a4cc9e22ad77bb0bf458648453a9

Files

66b4a4cc9e22ad77bb0bf458648453a9
.exe windows:4 windows x86 arch:x86

22aa25a9dbb99211db866b1a30897dd8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MultiByteToWideChar
GetModuleHandleA
GetFileSize
FlushInstructionCache
GetTickCount
VirtualProtect
GetLastError
GetProcAddress
LocalFree
LoadLibraryA
Sleep
LocalAlloc
ReadFile
VirtualProtect

user32

wsprintfA
wvsprintfA

Sections

>MUrRYL_
Size: - Virtual size: 176KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

!,:>7\LO
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

r(LXc:4c
Size: - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

J2e'.Bc:
Size: - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

%m^0!mH0
Size: 176KB - Virtual size: 175KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE