04fdab451ff09974c2f4c0b287ae5ee744be91744af9816cf4ea35aee3bf3368 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

04fdab451ff09974c2f4c0b287ae5ee744be91744af9816cf4ea35aee3bf3368
Size

30KB
MD5

cc0c58e905388bb50f562012901d5921
SHA1

c178e1e8a378ed6bb54e3bbcf8fe12dea8dfb106
SHA256

04fdab451ff09974c2f4c0b287ae5ee744be91744af9816cf4ea35aee3bf3368
SHA512

a229fdf994a13d012c0020f06ce33abe4bf0a6919d383f5e663d0149774f8bdd64ffae6bfe8399933c276817a7938cba489db96c71a8398e3b42b113a9b14692
SSDEEP

768:bmjqVjFj3I+15SoVxEz4lcfjh4d6DmoEClldeU:CjqtFToeU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04fdab451ff09974c2f4c0b287ae5ee744be91744af9816cf4ea35aee3bf3368

Files

04fdab451ff09974c2f4c0b287ae5ee744be91744af9816cf4ea35aee3bf3368
.exe windows x86

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ