66fd3a0c3680f18960c943f0cee10662 | Triage

Sharing

General

Target

66fd3a0c3680f18960c943f0cee10662
Size

7KB
MD5

66fd3a0c3680f18960c943f0cee10662
SHA1

c9f11b429676c2e095776b04906db1df417aca2c
SHA256

1a112c177a0c585c769ca16a806caa5ec015913a246f4f21043104dfcc0e5add
SHA512

71914b49f07243aa3a579c005501e65ee2cf273193ea1804cba3184214a97f48469b95a301a48b8d9800fdfc31600da71f2c93c727050f3adf3d0df79fc9a41a
SSDEEP

96:hDrw3QmCec0Yo54yJ9YKEO49oxu0W7TxJXP85V6DqypR6SZLXQE8P1XJ07C:hDrw9Go54GYKJ49oo0iU5LSLArFKC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
66fd3a0c3680f18960c943f0cee10662

Files

66fd3a0c3680f18960c943f0cee10662
.exe windows:4 windows x86 arch:x86

15a40fc888a24c3586ca9563306e006f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
ExitProcess
GetModuleFileNameA
LoadLibraryA

user32

wsprintfA
MessageBoxA

Sections

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 756B - Virtual size: 756B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE