ab2f1188d0065432b4f35f261db7cda988a259ca110006383d452430adb6be93 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ab2f1188d0065432b4f35f261db7cda988a259ca110006383d452430adb6be93
Size

41KB
MD5

ba3381b21dfa1194664147a63fb534b2
SHA1

7a37741840bf17e0af5ffc7d794cccd66ce1c78e
SHA256

ab2f1188d0065432b4f35f261db7cda988a259ca110006383d452430adb6be93
SHA512

b5be853fb858317735173df531e64a992b26b7d8ac5928134d494a307ea69a317fe0906dd4f6bfdf9bc52fd3f1023efe604936c364ff83f57b21f76a2f90f3d7
SSDEEP

768:MZdBvmbEXuBdfpmyb8AVfj5tFeGrrmOiohSk5QGa7lT3E:uBvmYXuPfpmyXNj5t4AE84P5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab2f1188d0065432b4f35f261db7cda988a259ca110006383d452430adb6be93

Files

ab2f1188d0065432b4f35f261db7cda988a259ca110006383d452430adb6be93
.exe windows x86

b55f776e57c6a6e791d3ddbe3178ef57

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

LoadLibraryA
FreeLibrary
lstrcatA
lstrlenA
ExitProcess
VirtualAlloc
GetProcAddress

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 1024B - Virtual size: 530B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 398B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ