66a44784e615e3f30c0f6e660632dd237f9b7d08980f71c1db10d3133314d7fa | Triage

Sharing

General

Target

66a44784e615e3f30c0f6e660632dd237f9b7d08980f71c1db10d3133314d7fa
Size

40KB
MD5

55af0fd8635f86b4a8ddccadf5394695
SHA1

254b01794b82c503404721504c27589b467afb13
SHA256

66a44784e615e3f30c0f6e660632dd237f9b7d08980f71c1db10d3133314d7fa
SHA512

8d7e57406b62750c07fa7033a1d6a84d6e93431ac99ec03c615216b17c21791f9dff11bce8cd0d45761584a3e7ed1188c519fd99ff9370bf5eb93aa1bca5964a
SSDEEP

768:DqPJtsA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKYfdhNhW:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wY2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
66a44784e615e3f30c0f6e660632dd237f9b7d08980f71c1db10d3133314d7fa

Files

66a44784e615e3f30c0f6e660632dd237f9b7d08980f71c1db10d3133314d7fa
.exe windows:4 windows x86 arch:x86

3b884b93be1eaa99038bd3acaaa5f577

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

GetFileSize
WaitForSingleObject
CreateThread
HeapFree
DeleteFileA
ExitProcess
lstrcmpiA
lstrcatA
GetWindowsDirectoryA
HeapAlloc
GetProcessHeap
Sleep
GetModuleFileNameA
CloseHandle
GetLastError
CreateMutexA
HeapReAlloc
FindClose
FindFirstFileA
GetProcAddress
LoadLibraryA
CreateProcessA
CreateFileA
ReadFile
WriteFile
FlushFileBuffers

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetSetOptionExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE