a32e6e0d7de16d0c79da6a74883c11ec | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a32e6e0d7de16d0c79da6a74883c11ec
Size

128KB
MD5

a32e6e0d7de16d0c79da6a74883c11ec
SHA1

f28bb5b7fc3701d79c4961b340860a4152f1f1f4
SHA256

1c563be03d65ccf7f060c7dddf21a89f136e5195d9f3ac88ce4b58d5ec8598a4
SHA512

05e7795c8e0c69fe83ac709b3216a16ee6acbf18c029e3c6335a4974bed34bdce74eeadd8ce260ac2e47a83eda58e0113d52b86fcd436184db4dc94f91307dfa
SSDEEP

3072:zEUg41EBFE4hnrkIntKAzB1gtOa1qnrkIntKAzB:gbE4lrzLzBatO2SrzLzB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a32e6e0d7de16d0c79da6a74883c11ec

Files

a32e6e0d7de16d0c79da6a74883c11ec
.exe windows:1 windows x86 arch:x86

9c0050334da711b5147027326c52827d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetFileSize
GetModuleHandleA
CloseHandle
GetTickCount
GetWindowsDirectoryA
CopyFileA
LocalAlloc
LocalFree
CreateFileA
ReadFile
RtlUnwind
WinExec
WriteFile
DeleteFileA

user32

MessageBoxA

advapi32

RegCloseKey
RegOpenKeyA
RegSetValueExA

crtdll

__GetMainArgs
exit
memcpy
memset
printf
raise
signal
strcat
strchr
strlen
strncpy

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 1024B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ieoo
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ