066f51d5840292ed338d65bdb96fd0316f980ff5077ca677b6ff295e85921732N | Triage

Sharing

General

Target

066f51d5840292ed338d65bdb96fd0316f980ff5077ca677b6ff295e85921732N
Size

250KB
MD5

2271583d9217dcdae34112de8b1ee420
SHA1

2c80d6179948b1ea4acf2b12b85dcad8f605c880
SHA256

066f51d5840292ed338d65bdb96fd0316f980ff5077ca677b6ff295e85921732
SHA512

8f779d8a5597ed84e33c15cca29083e5ba5409e058ffd57fbd164f6feb6f11c80a01b870bd409de151a24f04ba33ddae34a52a8834b6c68ffa3ba8d65f405f95
SSDEEP

6144:z2InZdjWpmLyrSBPGawfp+ed0LVSvFtPyV5FoELpE:/zCprGNE+euLkvFtqV5FogpE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
066f51d5840292ed338d65bdb96fd0316f980ff5077ca677b6ff295e85921732N

Files

066f51d5840292ed338d65bdb96fd0316f980ff5077ca677b6ff295e85921732N
.exe windows:4 windows x86 arch:x86

efc4e2b1a3f42bcbcff74a2290441ccc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

crtdll

malloc
_exit
_XcptFilter
exit
_acmdln_dll
_initterm
__GetMainArgs
_commode_dll
_fmode_dll
_global_unwind2
_local_unwind2

kernel32

GetSystemTime
GetProcAddress
LoadLibraryA
_lopen
GetModuleFileNameA
GetModuleHandleA
GetStartupInfoA

user32

IsCharAlphaA

Sections

.text
Size: 1024B - Virtual size: 738B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 622B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ