32dc21a7e526f5233d8955ad4a5022bf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

32dc21a7e526f5233d8955ad4a5022bf
Size

32KB
MD5

32dc21a7e526f5233d8955ad4a5022bf
SHA1

134ccade7863a9f4948f12ede25177c40af79893
SHA256

44658dcb40eb3a128cdcbb5d58fdad0d8c9307cacc1fbd5414ef031969807eab
SHA512

112528a7b96fcbdce03082792f1993b48f16bac23f541c14a159fb933cdeda385d5cc4da7f5076ed59fe5a63e0720c21de5d5bf4a02c226069a0bcd8085e9675
SSDEEP

768:avHyqkKrSzOekvaT0wmRv1T0CdSAs3Ma9+7gvbqeg4rE:avFrSO7v9JoPYg8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
32dc21a7e526f5233d8955ad4a5022bf

Files

32dc21a7e526f5233d8955ad4a5022bf
.exe windows:1 windows x86 arch:x86

9c0050334da711b5147027326c52827d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetFileSize
GetModuleHandleA
CloseHandle
GetTickCount
GetWindowsDirectoryA
CopyFileA
LocalAlloc
LocalFree
CreateFileA
ReadFile
RtlUnwind
WinExec
WriteFile
DeleteFileA

user32

MessageBoxA

advapi32

RegCloseKey
RegOpenKeyA
RegSetValueExA

crtdll

__GetMainArgs
exit
memcpy
memset
printf
raise
signal
strcat
strchr
strlen
strncpy

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 1024B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ieoo
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ