02dc2008422f58382afc2b0d2ced2a641a50341bd60bc86d4f60f005ad1f47ef | Triage

Sharing

Copy URL Twitter E-mail

General

Target

02dc2008422f58382afc2b0d2ced2a641a50341bd60bc86d4f60f005ad1f47ef
Size

984KB
MD5

a5a3b9130b831e70f3f4a201149ea4d1
SHA1

dfafc850d41b7bf59b4dbdfa5425c8de04074bda
SHA256

02dc2008422f58382afc2b0d2ced2a641a50341bd60bc86d4f60f005ad1f47ef
SHA512

a12698da3c335e193776487fd345a17681cff4557f361f086b5d033e66381350c17aa99028290a15d3aeb0c3416fc5d1849e7c41fedf3c0867b969df653a5f72
SSDEEP

24576:hZRTN6XsJ9yl9qTTCCIMPBGg2uNZJGEc7wAoukH/NwVnD:xTNU90Cq2UTMIfNwt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02dc2008422f58382afc2b0d2ced2a641a50341bd60bc86d4f60f005ad1f47ef

Files

02dc2008422f58382afc2b0d2ced2a641a50341bd60bc86d4f60f005ad1f47ef
.exe windows:4 windows x86

7faf0b83862feb689b86190e96b48b6d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

user32

GetWindow

advapi32

RegDeleteKeyA

shell32

SHGetFolderPathW

Sections

.text
Size: 200KB - Virtual size: 312KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 768KB - Virtual size: 768KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ