66d6e003b5ce0ca91e8958678c54b5b8 | Triage

Sharing

General

Target

66d6e003b5ce0ca91e8958678c54b5b8
Size

393KB
MD5

66d6e003b5ce0ca91e8958678c54b5b8
SHA1

5a037b51f5d4938ad5012be193ad0dc174063cb2
SHA256

78cfcfbebf76afd7b39f6cfeaa05484dc1c08f47916b66f939149a72c851d00c
SHA512

adadb05312aacf0ddc824a741d4cbac792f41ecf4450b35cf7120f9380694b5f81cd80d9865fde765774aec2a56c7851d6e1d14d3623ae392a24d19f50bfa74c
SSDEEP

6144:aPq5xg7dUShNmPhlen1GJw9B1uqY1dZHhptjYUxevM79lWzuDRsxyYZvy0TDjM7v:ayLg7dUmmLen1G6Lkjr7plWzuDRsVqN5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
66d6e003b5ce0ca91e8958678c54b5b8

Files

66d6e003b5ce0ca91e8958678c54b5b8
.exe windows:4 windows x86 arch:x86

7aab3495dbf49e4f0ff548579475c11e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
CloseHandle
TlsGetValue
LocalFree
GetConsoleAliasA
GetConsoleCP
FreeEnvironmentStringsA
CreateFileA
HeapCreate
Sleep
CreateFileMappingA
FindAtomA
GlobalUnlock
FindClose
WaitForMultipleObjects
GetACP
LoadLibraryExA
GetModuleHandleA
LocalLock
GetCalendarInfoA

user32

CascadeWindows
CheckRadioButton
DefWindowProcA
GetIconInfo
GetDlgItem
DispatchMessageA
CallWindowProcA
FillRect
DrawTextA
DrawEdge
IsWindow
SetFocus
GetDC
MessageBoxA

setupapi

CMP_Report_LogOn
SetupCloseInfFile
CM_Add_Range
CM_Add_IDA
SetupCloseLog

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ