c66fa7ebcac6cb70fc2dcbc210a61ac0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c66fa7ebcac6cb70fc2dcbc210a61ac0
Size

54KB
MD5

c66fa7ebcac6cb70fc2dcbc210a61ac0
SHA1

1f6bdcf5438a63ee3d4e25642921cfa3d56e488b
SHA256

fce79d022688fc8187a00c6181f2fb45466a610ed57f5a84d6c6d99bc83c6801
SHA512

0518c502c691ac9c3fa34e39eb82b4020c8af0a1cccfe20cb8e4fde728efca6159ea536e6f06bc3d858a55ac604eb716dbadaf33282068962e617a6b092d670c
SSDEEP

768:HcCLZTZ1gIMCB/nO3jXLy7u+yvRLVPPlY63mrYw6jN4fqoOtza17DeuGhc:HdLhPtFggu5vHPSE8Aqfq9zyD3GC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c66fa7ebcac6cb70fc2dcbc210a61ac0

Files

c66fa7ebcac6cb70fc2dcbc210a61ac0
.exe windows:5 windows x86 arch:x86

4f1a477a338d7b69604fb956c93690be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LeaveCriticalSection

shlwapi

PathCombineW
PathFileExistsW
PathFindFileNameW
StrCmpNIA
StrCmpNIW
StrStrW
wnsprintfA
wnsprintfW

user32

CharLowerBuffA
CharUpperW
ExitWindowsEx
GetClipboardData
GetCursorPos
GetIconInfo
GetKeyboardState
GetMessageA
GetWindowLongA
OpenDesktopA
PeekMessageA
SendMessageA
SetProcessWindowStation

Sections

.kpclcl
Size: 44KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xif
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.liran
Size: 5KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ