02a093c3fe495b1a1dbcee6793868bf0 | Triage

Sharing

General

Target

02a093c3fe495b1a1dbcee6793868bf0
Size

198KB
MD5

02a093c3fe495b1a1dbcee6793868bf0
SHA1

e36b4cb29ecd00f79f20a5b59db11504b58055ca
SHA256

a9a09261d1119645f45596d1c354af3603ff979d07ccf7a49630326322d6e9e5
SHA512

10bee08b1724f25b6e175679c944bbafe2dc7c1c13ea5c55a7f4d6a0098380865bb4f74d17a323b623b446558a5ce0a64992c725f97648d88d4c9493fdded4a1
SSDEEP

3072:ry+mrh42ya4kcFoWZHlWzzXGOJlBpPlPlUGVa0Th+7dUchBYp:rSrh42xcTHlrMXRlPH+7dd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02a093c3fe495b1a1dbcee6793868bf0

Files

02a093c3fe495b1a1dbcee6793868bf0
.exe windows:4 windows x86 arch:x86

f9cb13eaf34ee76d9832e3edb319c9e9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ShellExecuteA
SHGetSpecialFolderPathA

kernel32

lstrcpyA
lstrcatA
WriteFile
Sleep
SizeofResource
LockResource
LoadResource
CloseHandle
CreateFileA
ExitProcess
FindResourceA
GetModuleHandleA

advapi32

RegSetValueExA
RegOpenKeyExA
RegCloseKey

Sections

.text
Size: 1024B - Virtual size: 734B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 542B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 193KB - Virtual size: 192KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE