b66f35532c7134a4aa64310ae21cc1bd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b66f35532c7134a4aa64310ae21cc1bd
Size

42KB
MD5

b66f35532c7134a4aa64310ae21cc1bd
SHA1

4790cd6f6d99c994ce1a02ca8fec8ce5174bf1f7
SHA256

9bdf889ca330c7545b89e0aabd1c7d4d9eacfae4fa4dea77c8d6db9bec02ef41
SHA512

24a7a6f528520d02311381b28404cdac3cee4449ffa4a898262f07c8b05fa0acb9b875969be68935fd65db91ee35334fbea878bd20e6148e56b1f4cbbd96666d
SSDEEP

768:7/D8dGFIYt8IW0JXgR34JUOSO3ZLGulc42u2Y1tdFw2ahd8LMs4++UT:778dGFIY7W0J7JIcSultn1tdP4++

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b66f35532c7134a4aa64310ae21cc1bd

Files

b66f35532c7134a4aa64310ae21cc1bd
.exe windows:4 windows x86 arch:x86

20c5398890dadf44902342d7dcef6c32

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wsock32

GetNameByTypeW
htons
shutdown
socket
WEP
WSARecvEx
NPLoadNameSpaces

urlmon

WriteHitLogging
CopyBindInfo
URLDownloadW
CoInstall
AsyncGetClassBits
RegisterFormatEnumerator
GetClassURL

Sections

.text
Size: 18KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE