ee785a189dea1e1cc8cb93c43ff83a77 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ee785a189dea1e1cc8cb93c43ff83a77
Size

17KB
MD5

ee785a189dea1e1cc8cb93c43ff83a77
SHA1

63654e42264cc89df9fe9120cb81bcb091f490fc
SHA256

532857936c2ce85b1debd22c8494ebbe594f3c50258f8741b23630045260a0a5
SHA512

b2f0e04fe4dcd777e83c2e2ed0ff4057c594947876049e2000e4e43214ba1332e5eb9ffe283c97a81c03156695f81d68a51eb931be423bcd1738240a63451213
SSDEEP

384:fFkFZTy7X1cmZO2Zp+Nye8pqrmub8TyztsDN:fqDcX1oKK8o8TyJc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ee785a189dea1e1cc8cb93c43ff83a77

Files

ee785a189dea1e1cc8cb93c43ff83a77
.exe windows:4 windows x86 arch:x86

1e4c0da5737da53aff5e6e0ab7de1efa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetModuleFileNameA
GetSystemDirectoryA
GetWindowsDirectoryA
ExitProcess
OpenMutexA
Process32First
Process32Next
Sleep
CreateToolhelp32Snapshot
CreateMutexA
CopyFileA
OpenFile
CloseHandle
FindClose
FindFirstFileA

advapi32

RegOpenKeyExA
RegCreateKeyA
RegCloseKey
RegSetValueExA

shell32

SHGetSpecialFolderPathA
ShellExecuteA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 692B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE