66d51c74306e1b8865f07d5784dcd1fe | Triage

Sharing

General

Target

66d51c74306e1b8865f07d5784dcd1fe
Size

6KB
MD5

66d51c74306e1b8865f07d5784dcd1fe
SHA1

9da19a1e1ac3741bacabf49c5d92730e4b119c06
SHA256

3cd029b8300c26187c3029111aef6c56acec2adbf080997b66698b518e9a24c3
SHA512

3220913a80a4fc75a078c40c478834ceb0b705908a33957902d69804191a44c4b087a375e8df51ef2796461f408699181e6793f6ed7ca911a7562a05ef230918
SSDEEP

96:Z1M4YxtMtL9VobtgEwSL9Vobt3tDBE61xQ6wHEcK6:DYa9mtgE79mt3vwHEcK6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
66d51c74306e1b8865f07d5784dcd1fe

Files

66d51c74306e1b8865f07d5784dcd1fe
.exe windows:1 windows x86 arch:x86

0ae8fb7966ca3f44ef5bf1eddeb1c738

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CharToOemA

kernel32

CloseHandle
CreateFileA
CreateProcessA
CreateRemoteThread
DeleteFileA
ExitProcess
GetModuleFileNameA
GetProcAddress
GetStartupInfoA
GetSystemDirectoryA
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
LoadLibraryA
ReadFile
Sleep
VirtualAllocEx
WinExec
WriteFile
lstrcatA
lstrcmpiA
lstrlenA

shell32

SHFileOperationA

Sections

.code
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 722B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE