66d34968c9d6d840f3e6ba3ee76aa3ed | Triage

Sharing

General

Target

66d34968c9d6d840f3e6ba3ee76aa3ed
Size

66KB
MD5

66d34968c9d6d840f3e6ba3ee76aa3ed
SHA1

0e363faeb5b6be178d32977bf443c8f29f089816
SHA256

582814ce7311efcf3d84abf5c3401ab20e27a56341493109d75378c1e3b4598f
SHA512

491621a2694a531594f99caf7005b9799303deb27734220c1792683fab9ab0e27a069b618ba9d7e1baa92a226f8f587ad8cef3a1b8b0539a6cd2b71c509f25fd
SSDEEP

1536:GEojP4BDnaXk7W20AwFoVMgQHrja4DpAGnR5//jWjxmIKPpr:tq2na0zbkoAHztT//jW1m3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
66d34968c9d6d840f3e6ba3ee76aa3ed

Files

66d34968c9d6d840f3e6ba3ee76aa3ed
.exe windows:4 windows x86 arch:x86

f1ca77fcb15c9f4f410706046fd746ee

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatA
SetProcessPriorityBoost
InterlockedPushEntrySList
GetProcessPriorityBoost
GetCurrentThreadId
GetCurrentProcessId
HeapSummary
AddAtomW
MapUserPhysicalPagesScatter
_lread
GetPrivateProfileStringW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE