fbc92543c28689ea1a456748ef34dc917b2caa7cd49a2d8ac95fa0bbd3232307 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fbc92543c28689ea1a456748ef34dc917b2caa7cd49a2d8ac95fa0bbd3232307
Size

1021KB
MD5

38a60fdfc3033011096cc4e3202cfd6d
SHA1

d182558fb8b38a0c701dcce386a0e906e1c0f711
SHA256

fbc92543c28689ea1a456748ef34dc917b2caa7cd49a2d8ac95fa0bbd3232307
SHA512

2e86f80c7086e9f4a3e96ac9199cf251c58a5faf39e7807088621d118443d8f62cacdc0f5e56613d2eac847545e1026153b39fc85e2ef3cdf0adfd9242ac8b87
SSDEEP

12288:wjuRyeRfzqWckJF1dva4YwIkrw8Zk7coWeB0U3+IdlMvoUl:QuRyqrqWckrTaQIkrBkgoBcvoUl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fbc92543c28689ea1a456748ef34dc917b2caa7cd49a2d8ac95fa0bbd3232307

Files

fbc92543c28689ea1a456748ef34dc917b2caa7cd49a2d8ac95fa0bbd3232307
.exe windows x86

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 1024B - Virtual size: 548B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1013KB - Virtual size: 1013KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ