15ee2283520aa35c3ff50d573a6392bc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

15ee2283520aa35c3ff50d573a6392bc
Size

17KB
MD5

15ee2283520aa35c3ff50d573a6392bc
SHA1

0901763a66c464af52c9b03a16bbb38e1f4a1855
SHA256

cb84541a44f82c9082bc4e997d946982b57db9ad33ccc6009422f415665f8d86
SHA512

2a4fd6cddd98150f7a4edad3b66dcf20be0cd21aec832a20fa020b035d5e20a6e172f29a434d00e287198fda244a23d2d0003a83012f77a29738161476952659
SSDEEP

384:uFfIYAHiCcmZO2Zp+Nye8pqrmub8TyztsDN:uNGHiCoKK8o8TyJc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15ee2283520aa35c3ff50d573a6392bc

Files

15ee2283520aa35c3ff50d573a6392bc
.exe windows:4 windows x86 arch:x86

1e4c0da5737da53aff5e6e0ab7de1efa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetModuleFileNameA
GetSystemDirectoryA
GetWindowsDirectoryA
ExitProcess
OpenMutexA
Process32First
Process32Next
Sleep
CreateToolhelp32Snapshot
CreateMutexA
CopyFileA
OpenFile
CloseHandle
FindClose
FindFirstFileA

advapi32

RegOpenKeyExA
RegCreateKeyA
RegCloseKey
RegSetValueExA

shell32

SHGetSpecialFolderPathA
ShellExecuteA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 692B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE