4017a6a2b645e44a2c4918d0492058b3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4017a6a2b645e44a2c4918d0492058b3
Size

96KB
MD5

4017a6a2b645e44a2c4918d0492058b3
SHA1

d5e2b92e9f5946acdc3d65cd0ac96f63b185f984
SHA256

d478190effca56a16a92e4fd4cef6755e4ef2e748ca9b3b8447218d3a2e72d65
SHA512

080e15c7b43de28288b03358a37c8a01265329ea0f8b08c8f840b56f209b61b5750d638a3d566268454bd1638d386d1a24dc63ea475433c31c6d85eff907e10b
SSDEEP

384:JTYJ7ACEZdbS30lwgn71/COYBsf1LttfE+zIfwkcsf/4yTX9DVVoqtfUWHqbnUPw:yJ7urw3i3EoIfUi/TtD7tsWHcIw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4017a6a2b645e44a2c4918d0492058b3

Files

4017a6a2b645e44a2c4918d0492058b3
.exe windows:4 windows x86 arch:x86

6abc07f8725616ad05ce2e5b362c3952

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetModuleHandleA
GetLastError
SetLastError
GetProcAddress
Sleep
ExitProcess
GetCommandLineA
CreateThread
FreeLibrary
GlobalFree
CloseHandle
GlobalAlloc
GetStartupInfoA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyA

msvcrt

strlen
memset
_except_handler3
strcpy
strstr
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
strcat

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 908B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.erdata
Size: 68KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE