002a75faf7cb92b2c8eae7e53650bd4e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

002a75faf7cb92b2c8eae7e53650bd4e
Size

20KB
MD5

002a75faf7cb92b2c8eae7e53650bd4e
SHA1

07805f61ca67062bd3dbb8b644700e96e5037d4b
SHA256

3f163ceae2117bb970e9760ad6a4156567055913080b71fe91f56fca00faef8a
SHA512

a2414bc4abc4f44c83b966b38cda84d758edc469ec4a0aebf4747f61b07b8aa59f44f661e8143a66cfe8d804f35d82dda22d8215d5be835de3fdebcf4b4a9386
SSDEEP

192:GsHkB0UKMQZkIkfLxo64/QrkPC2qGT567Quhvapv/FUaMCDV5:m0dvkfLr4HC27V67QGCpnFUabB5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
002a75faf7cb92b2c8eae7e53650bd4e

Files

002a75faf7cb92b2c8eae7e53650bd4e
.exe windows:4 windows x86 arch:x86

1098cf613baccc349e9cf9e4533c40cc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegCloseKey
RegOpenKeyExA
RegSetValueExA

kernel32

AddAtomA
CopyFileA
CreateThread
ExitProcess
FindAtomA
GetAtomNameA
GetModuleFileNameA
GetModuleHandleA
GetSystemDirectoryA
SetConsoleTitleA
SetUnhandledExceptionFilter
Sleep

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
fflush
fprintf
free
malloc
signal
strcat
strlen

user32

BlockInput
FindWindowA
ShowWindow

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 320B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 464B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE