33e8044864b261cee44d5becefa121a113020dd79876fc763a602fc814667200 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

33e8044864b261cee44d5becefa121a113020dd79876fc763a602fc814667200
Size

72KB
MD5

3be76e4c64aaa07c21ee6afe712f7763
SHA1

4787cf46014019c5c9224548c4110edaa230a4ca
SHA256

33e8044864b261cee44d5becefa121a113020dd79876fc763a602fc814667200
SHA512

0870db8841ef2e558bc6d473dce08deb5068914970541464b3b0a81f79a53a222c072e19c52b5b7d88a2824c84c7784aa849a081180c388a33f81e67dd079677
SSDEEP

1536:scFKmc9EfmOqrj8Dgy/Mgday+k5/Bm7i5F7HKHTFyB3ej:9FKmturjOM+ayZ/k24YBuj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
33e8044864b261cee44d5becefa121a113020dd79876fc763a602fc814667200

Files

33e8044864b261cee44d5becefa121a113020dd79876fc763a602fc814667200
.exe windows x86

2edce3c7904dc55014701441f998b22e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CloseHandle
LoadLibraryA
CreateFileA
LCMapStringA
ExitProcess
GetCurrentProcess

user32

wsprintfA
SetWindowLongA
CreateWindowExA
CharLowerBuffA
CloseWindow

advapi32

RegCreateKeyA
RegSetValueA
RegEnumValueA
RegQueryValueA
RegDeleteKeyA
RegCloseKey
RegOpenKeyA
RegDeleteValueA
RegEnumKeyA

Sections

.text
Size: 4KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ