b66275415b382fdf01742f3add1f5afb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b66275415b382fdf01742f3add1f5afb
Size

76KB
MD5

b66275415b382fdf01742f3add1f5afb
SHA1

9c1cfbab88d8286012875f0c3cf222d434d24557
SHA256

e5d17d85e5d032c85c6f16616ad13f4f51be4be378a44cc61651d2abab33863d
SHA512

dc9e8ea9bcaa3293517153f38e027c5523da53409632e1a905d8720184ebfa3172b45c43b36413073b17b25531f2903c136a7167b1d58af3da97d47c63c81551
SSDEEP

1536:1UPrbgHxfXr/o7a2T2WVxCZo0MMXgQ/+a29E9AwjfG3yLpjVrs2ryrd1vUQuq6:WeRr/ZmGXbF29ijbHs2qo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b66275415b382fdf01742f3add1f5afb

Files

b66275415b382fdf01742f3add1f5afb
.exe windows:4 windows x86 arch:x86

b1107b742b05770e64b03d69ba84f6de

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalAlloc
FindResourceA
SetVolumeMountPointW
CopyFileA
GetExitCodeProcess
LCMapStringA
CreateJobObjectW
GetConsoleCommandHistoryLengthW
GetModuleHandleA
GetConsoleCursorMode
MoveFileWithProgressW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE