66cdda6006ade30dc3720d474d2aea30[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

66cdda6006ade30dc3720d474d2aea30.bin
Size

119KB
MD5

66cdda6006ade30dc3720d474d2aea30
SHA1

d9b9d53f98dc7a5a996bfe0349f61719abb66745
SHA256

556f4874734246d063f1941098168137c7b8a43dda590c6a26ac8368cbfebdc5
SHA512

11c7bf669455d2ad25eac0e4ecdf95fad266ecd2f1a24338e6c04a19c6759ed7402e9932a06e34a594b5a2445c9097413578eb7cd406656f37cc12e1f360be52
SSDEEP

3072:r3jEkV6d9s6YyZCdicIwRvZcWIn75eMnsKyj:ckV6c6fCdkGvZdIn7hsT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
66cdda6006ade30dc3720d474d2aea30.bin

Files

66cdda6006ade30dc3720d474d2aea30.bin
.exe windows:4 windows x86 arch:x86

e2cf487316eeb7f6be70b5572778762a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InitOnceInitialize
TermsrvAppInstallMode
CancelSynchronousIo
LZInit
GetStringTypeExA
CheckTokenCapability
GetCurrentApplicationUserModelId
UnregisterWait
SizeofResource
ResetWriteWatch
SetThreadLocale

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE