66a6bf343f332b1bac8716050ef9a817 | Triage

Sharing

General

Target

66a6bf343f332b1bac8716050ef9a817
Size

23KB
MD5

66a6bf343f332b1bac8716050ef9a817
SHA1

03f1c980e4e80c0277c2a4d1b57a006c5de445ea
SHA256

ddd182de50f65a13207d03a9e1e13348641715b8278929caba37f0019f02d251
SHA512

cfb40fc504786c6fcbb11711ce18953750a9cce09ec9ca2f2cace0f9a1a7962dc5a361eee3937ccb4a82066fd679a156c96edbccdaf17235b05a6d081ed2e61f
SSDEEP

384:b+/gwGTFZ3bslepd8Wy1iCdiaM+MxuNt2puw4tVHIf6W2HclmYx:bagfTFJbscpd8WaiiialMxuNt2gwV6M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
66a6bf343f332b1bac8716050ef9a817

Files

66a6bf343f332b1bac8716050ef9a817
.exe windows:4 windows x86 arch:x86

948492c80e85edb45cce8fa2a5c64a48

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
ExitProcess
GetStartupInfoA
GetSystemDirectoryA
DisconnectNamedPipe
GetConsoleMode
GetComputerNameExA
GetConsoleAliasExesA
GetCommandLineW
SetConsoleLocalEUDC
SetMailslotInfo
UnregisterConsoleIME
GlobalGetAtomNameA
EndUpdateResourceA
MoveFileWithProgressA
IsBadHugeReadPtr
GetNamedPipeHandleStateA
EnumResourceTypesW
GetProcAddress
UnlockFile
GetConsoleAliasA
FindFirstVolumeMountPointA
GlobalMemoryStatusEx
GetNumberOfConsoleFonts
CloseProfileUserMapping

Sections

code
Size: 4KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

data
Size: 15KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

idata
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ