d66e598fb9106cf0fe980c94e62ee890N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d66e598fb9106cf0fe980c94e62ee890N
Size

33KB
MD5

d66e598fb9106cf0fe980c94e62ee890
SHA1

efc6016f7a1e010dfe75a5a206149ff9b9ff3946
SHA256

e4f125ae3416cfe8c51e20b8a71d7eb5d0450f39d717be99ce2ac19f9331017b
SHA512

f4c8c784d78b760629d98e4a6d448f8cf82dea7460d4e441758a9740967cabb0c62549c76b1ced27cf6d756febfb6cb347252be12592fee8faae9622f028332e
SSDEEP

768:HUU+UOsf4e+EdxkhgkKQTBSlVNkKJiaAjju1:HSUd47wkhpTMnaKsaAG1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d66e598fb9106cf0fe980c94e62ee890N

Files

d66e598fb9106cf0fe980c94e62ee890N
.exe windows:4 windows x86 arch:x86

42e7c14ca48123966bb2bc209b151b7d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__p__osver
__p__winver
__toascii
__argc
__doserrno
__threadid

user32

MessageBoxA
MessageBeep

kernel32

CreateWaitableTimerW
CopyFileW
DeleteAtom
EnumCalendarInfoExW
DeleteFiber
FatalExit
CreateFiber
GetLastError

Sections

.text
Size: 20KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE