05d0de56b8adc2012ffe976636655094 | Triage

Sharing

General

Target

05d0de56b8adc2012ffe976636655094
Size

547KB
MD5

05d0de56b8adc2012ffe976636655094
SHA1

2ab42dca9735c68560f8fe1169e5d5c48bf04e22
SHA256

e406ff942ad7a6250b803b13817484578633745981a0868857e2c296bff7213b
SHA512

66e74ea707d6554053c7f8e9fa49ff0b5f1aea59278d99e1d577daca81ee7bc52979c3b14b38345875ed9b821c61ce21841e44fce416c767638a1e65c12173fd
SSDEEP

12288:vZ7iKcvOwBxujDIhEh9zgDAq5YRWLNMNDIj8Whb7ZO+:vZ7iJBkwO9z2Je8wWpU+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05d0de56b8adc2012ffe976636655094

Files

05d0de56b8adc2012ffe976636655094
.exe windows:4 windows x86 arch:x86

18f22db58cab30a15324b8bafad995e8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LoadLibraryA
CloseHandle
ExitProcess
CreateFileA
GetCurrentProcess
LCMapStringA

user32

SetWindowLongA
CloseWindow
CharLowerBuffA
wsprintfA
CreateWindowExA

advapi32

RegSetValueA
RegEnumValueA
RegOpenKeyA
RegDeleteValueA
RegQueryValueA
RegDeleteKeyA
RegCloseKey
RegCreateKeyA
RegEnumKeyA

Sections

.text
Size: 495KB - Virtual size: 496KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.DATA
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ