8742810715cede293a194d5e66869f5b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8742810715cede293a194d5e66869f5b
Size

22KB
MD5

8742810715cede293a194d5e66869f5b
SHA1

74e34cc462b6edf14429bb859dff39d0f9420938
SHA256

e24b5ca46591ca9aec6eaab3d7d88aab32bc1a82e83bb98fd4d30c9dbc0e70b0
SHA512

0be32cd93b03d26d4cf0dfb897cc47ce1a58adfaec3d78c5e05d3d9a371efa07bea802112b525439934d6045c72fe7e05f45b501c0055f96d7dd0e739f9f86f0
SSDEEP

384:EC8+b3Pg5PvvNvtjk3FpKnr2e0Spj7if2EmSW/dK9m:ZPOPHjQ3F4nCSpjzBN/E9m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8742810715cede293a194d5e66869f5b

Files

8742810715cede293a194d5e66869f5b
.exe windows:4 windows x86 arch:x86

ea9721c38debdff6421f79d3e51a02dc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegCloseKey
RegCreateKeyA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA

kernel32

CloseHandle
CreateFileA
GetEnvironmentVariableA
GetProcAddress
GetProcessHeap
GetVolumeInformationA
HeapAlloc
HeapFree
LoadLibraryA
Sleep
WriteFile
lstrcatA
lstrcpyA
lstrlenA

user32

wsprintfA

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 732B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE