66a004737b6e6e752db399d06bf30a87 | Triage

Sharing

General

Target

66a004737b6e6e752db399d06bf30a87
Size

11KB
MD5

66a004737b6e6e752db399d06bf30a87
SHA1

3054decd7a3ce994d1a4755d47940024f5e00c55
SHA256

16345177ba3a06c9017a3272d4fde91c89644a5f9747f5f73750bb894c052211
SHA512

a687a38b9b660345332621ab73d3ae521a836d5592ada1592b1ca4782fa33101b7a8cbf8d197d1b777c3a5138da5826686c354aeb34ea0bb8971455dda116ef2
SSDEEP

96:6nnIIQPZThumLdYtxEXHM8fDcpSXmyvlp5wAgoli8QRkjRFpA27:6nIIQBTHfD0SXmy5wFolGKR7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
66a004737b6e6e752db399d06bf30a87

Files

66a004737b6e6e752db399d06bf30a87
.exe windows:4 windows x86 arch:x86

732b04f66deaea8891527b6d7a4e628d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetKeyboardLayout
GetDoubleClickTime

shell32

ShellExecuteA

shlwapi

StrStrA
StrStrIA

kernel32

lstrcpyA
lstrcatA
LoadLibraryA
CloseHandle
ExitProcess
GetCommandLineA
GetModuleHandleA
GetProcAddress
GetVersion

advapi32

RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 652B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 552B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE