05aca93d20779c4ac3be97f20a53dd1b | Triage

Sharing

General

Target

05aca93d20779c4ac3be97f20a53dd1b
Size

181KB
MD5

05aca93d20779c4ac3be97f20a53dd1b
SHA1

78d4729014f452d687d417be89389312e18bcca6
SHA256

5bb208823ff5bc38ba09596d73aa9f8345ce3f6ae5d4a10746d61fcc2990eca6
SHA512

0748e7fec4f21f6e2be3bbcf72f2d4cd19b9aa4ba24c716a1593153e13ad91de638fdc55530489b1842af188c84a8e0e3aad126c7cc53aa90a48df5eac940aaa
SSDEEP

3072:4Il/oVZt0nY4YxL5LJCpuXQx7Zs29atkgaLvMYiY7dmolhh7:1lAVZt0nRq5LBAxtcdSAY7MK7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05aca93d20779c4ac3be97f20a53dd1b

Files

05aca93d20779c4ac3be97f20a53dd1b
.exe windows:5 windows x86 arch:x86

14dea5c72f41a888174d63c3d0068c02

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DosDateTimeToFileTime
CreateFileW
VirtualAlloc
GetWindowsDirectoryW
lstrcatW
GetCommandLineA

gdi32

GetStockObject

advapi32

RegCloseKey
RegOpenKeyExW

msvcrt

memcpy

Sections

.text2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text3
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 176KB - Virtual size: 176KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 428B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 630B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ