edbf104e80e0b752a4c60cd35d6534edcd24fc186b38537197eb3849664cd574 | Triage

Sharing

General

Target

edbf104e80e0b752a4c60cd35d6534edcd24fc186b38537197eb3849664cd574
Size

794KB
MD5

0ac9e6b60aa6397da9ff433f11d4564f
SHA1

a98a419a2a9a04135994ddde566708395be3726b
SHA256

edbf104e80e0b752a4c60cd35d6534edcd24fc186b38537197eb3849664cd574
SHA512

6ebb6074be3d58a93246f2e0beb13f80d3679e42f53781fb011c58c8ef39d0b099e2d6f959384456edc4bcbebafc9e2c8b823baddc880ef673b72eec16bbcf32
SSDEEP

12288:1ZrtdINHsGnxqQgZadX2tlGpWxk/KY/AnOD:TrtWNH/nxngZWGtlGpW1iAnW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
edbf104e80e0b752a4c60cd35d6534edcd24fc186b38537197eb3849664cd574

Files

edbf104e80e0b752a4c60cd35d6534edcd24fc186b38537197eb3849664cd574
.exe windows x86

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 786KB - Virtual size: 786KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ