66849f0c04088a70137e9ae30e907ca0N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

66849f0c04088a70137e9ae30e907ca0N.exe
Size

63KB
MD5

66849f0c04088a70137e9ae30e907ca0
SHA1

9a5780199c0fedef2058e31e5779061f417d6d44
SHA256

05fc5956b0ee3fe56f713c7afb0bf1d76fe84d2055464bfd3b4d994747f1a029
SHA512

a536a8e8bde625456d03a26e3126355842b5f81d56311cce08d096921765514a5f806e73125a6ee5647f17d6862b9a46d28aff5bca4bbb119732d3fbbd5b9fcc
SSDEEP

1536:zOFS+FhtwG1DI5e64YYuNe08xotVbqqMLevq94azONloXu3M8dGySVp5vtxxE6u:ah2a8M9xsbHMKQjecNySVpZxNu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
66849f0c04088a70137e9ae30e907ca0N.exe

Files

66849f0c04088a70137e9ae30e907ca0N.exe
.exe windows:4 windows x86 arch:x86

d10165ceefffd6974d891300624890bc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Heap32ListNext
PeekConsoleInputW
GetConsoleCharType
NormalizeString
DosDateTimeToFileTime
CreateThreadpoolTimer
BaseGenerateAppCompatData
MoveFileWithProgressW
WaitForThreadpoolTimerCallbacks
FindResourceExA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE