0911007abffd4d6f8cadc4178de69d08 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0911007abffd4d6f8cadc4178de69d08
Size

128KB
MD5

0911007abffd4d6f8cadc4178de69d08
SHA1

52eb337f97b441051c63354813ad55721c332bfd
SHA256

7f2e6903ad5e47b3d71c23a0e4b0f5c40e64b8b88456daf01fb78a10fa756e51
SHA512

b257da87700d31bb813f9aff723052925d22ab38b49799b0371539356b1ae80ea52f9d7cb111b5d54f8305a0849a68b37a895b9cb0c35dea4403a6654f615c66
SSDEEP

3072:Az2EYGhBoVUm4FP1J5t0LLquiseyj4FP1J5t0L:AaEdhBMUm4FteBiZyj4Fte

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0911007abffd4d6f8cadc4178de69d08

Files

0911007abffd4d6f8cadc4178de69d08
.exe windows:1 windows x86 arch:x86

9c0050334da711b5147027326c52827d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetFileSize
GetModuleHandleA
CloseHandle
GetTickCount
GetWindowsDirectoryA
CopyFileA
LocalAlloc
LocalFree
CreateFileA
ReadFile
RtlUnwind
WinExec
WriteFile
DeleteFileA

user32

MessageBoxA

advapi32

RegCloseKey
RegOpenKeyA
RegSetValueExA

crtdll

__GetMainArgs
exit
memcpy
memset
printf
raise
signal
strcat
strchr
strlen
strncpy

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 1024B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ieoo
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ