Malicious_a884a82a15461a9135971d1cd7f8a7ba9c47e6c359d8409cfaea2dacbd08129e[.]exe | Triage

Sharing

General

Target

Malicious_a884a82a15461a9135971d1cd7f8a7ba9c47e6c359d8409cfaea2dacbd08129e.exe
Size

60KB
MD5

afc4c76bfc9ccb33c248fc0dc72faa69
SHA1

4c5e103df6bbfdb0ead0e5b61e7f2e1d4160e0b3
SHA256

a884a82a15461a9135971d1cd7f8a7ba9c47e6c359d8409cfaea2dacbd08129e
SHA512

327044a7e14c9584ddb3e1d42f23cd6488fbf8116592f9221b73f12584a1046bdad6e60d9c6f1865c7fe307cb17dedc3053758eabf9d33cea8c9fa13c495c975
SSDEEP

768:6w8nr3SvetlELLA2QsEkPiQUVbKncqe0A9KgWRNUnMRrlnGGZB:9krcetl802rEkUVbKnle0A9SuMRJGGT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Malicious_a884a82a15461a9135971d1cd7f8a7ba9c47e6c359d8409cfaea2dacbd08129e.exe

Files

Malicious_a884a82a15461a9135971d1cd7f8a7ba9c47e6c359d8409cfaea2dacbd08129e.exe
.dll windows x86

eeb95284c509c0cd676bb6384e0e301f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
OutputDebugStringA
LoadLibraryA
IsBadStringPtrW
GenerateConsoleCtrlEvent

user32

RegisterDeviceNotificationA
TranslateMessage

advapi32

RegLoadAppKeyW

Sections

.text
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 132KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ