08a574a5d4fe1cd8691eb69f38944a6a | Triage

Sharing

General

Target

08a574a5d4fe1cd8691eb69f38944a6a
Size

52KB
MD5

08a574a5d4fe1cd8691eb69f38944a6a
SHA1

16905732be176e3caa357ef5dfb3f74359f3fb40
SHA256

e50e943e0b2b5bbf8025820b14dafabe47a9ea40f65f4849c1008b6555e6b010
SHA512

56c29d08d7cb6f9561d4842d988f44a6d9a4eed55b4c3022ebf5b9323202db42935a3223c6452940d69f13bd4ac87f581686d1639dc2af9b8fd0d066135146c5
SSDEEP

768:0DC6U3FkwUV+Xw1jh3jPD3lnztj7o+yryIpqu7Ej7cs0Vep0OqvIkTijxyGKzEyh:VAwUVlFJjbUpwFVvveHKUKr+bS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08a574a5d4fe1cd8691eb69f38944a6a

Files

08a574a5d4fe1cd8691eb69f38944a6a
.exe windows:4 windows x86 arch:x86

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ