15926de8e7c529e4292a6dddc6b6ea4f | Triage

Sharing

General

Target

15926de8e7c529e4292a6dddc6b6ea4f
Size

39KB
MD5

15926de8e7c529e4292a6dddc6b6ea4f
SHA1

203d436c622982a43b23e57e53b9dc26f6071887
SHA256

4fbb5f07f4c132884a296adf86f283a71d4c9b968f79f7bf2ad4e50e7805ae63
SHA512

28e6751ddc6df188cf3616efcbdd62a6e076a03244e9ca188a8cb4dd69249c46b829f70441cfdc5cece45b1630f0b2869221c231225681549df733d82328a9cf
SSDEEP

384:4/b7CJorJzEl022wp2VhdAZpv5k6iQfpKfSAu9P9cPCYxtzGBUBVcaxCSZPQTgjB:J/lv2S2uOSWSkFTj/7NWgUNxh7oCtd2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15926de8e7c529e4292a6dddc6b6ea4f

Files

15926de8e7c529e4292a6dddc6b6ea4f
.exe windows:4 windows x86 arch:x86

9f96081b7b1b071aa1012289401ebfcf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
ExitThread
GetProcAddress
CreateFileA
LoadLibraryA
ReadFile
VirtualProtect
LockResource
LoadResource
FindResourceA
VirtualAlloc
GetCurrentThreadId
VirtualAllocEx
ExitProcess
CloseHandle
GetComputerNameA
GetModuleHandleW
GetModuleHandleA
WaitForSingleObject
GetVersionExA
LocalAlloc
LocalFree
CreateMutexA

advapi32

GetUserNameA

user32

FindWindowA
RegisterClassA
GetActiveWindow

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 76KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ