23c2f5bff7c8189670151a66cb4d3d8f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

23c2f5bff7c8189670151a66cb4d3d8f
Size

92KB
MD5

23c2f5bff7c8189670151a66cb4d3d8f
SHA1

8f1112676843c7d9ee06269f86c1cedf279fd0ba
SHA256

8ef413354143d5b108d9ff6fddefcd500cb597e460fbabe7a5b1f9d9e2dde2eb
SHA512

5ebf5537db620fc0d96c1836f1d129d405fc341c451de27a31ab675fee21ba9e6e6389467506a9551873940a809c2e08d060a9ff1619995ab9b132430519f16c
SSDEEP

1536:ILNmoVF/HcyEio1vZv7781cyZxubXaIDe8stIDmEznTkAqseaQBiKBvVK8yxdw/N:ILNzVF/HcyEn778SyrubKryZDTkeevV1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
23c2f5bff7c8189670151a66cb4d3d8f

Files

23c2f5bff7c8189670151a66cb4d3d8f
.exe windows:4 windows x86 arch:x86

d08088bb79f809895727a760be217370

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetComputerNameA
GetModuleHandleA
SetFilePointer
InterlockedIncrement
CreateProcessA
DeleteFileA
IsBadReadPtr
CloseHandle
CreateFileA
WriteFile
CreateMutexA
GetCurrentProcess
GetWindowsDirectoryA
ExitProcess

ole32

CoInitialize
OleCreate
CoTaskMemAlloc
CoUninitialize

user32

GetWindowLongA
PostQuitMessage
MessageBoxA
GetMessageA
DestroyWindow
DispatchMessageA
LoadIconA
ShowWindow
UpdateWindow
DefWindowProcA
CreateWindowExA
SetWindowLongA

oleaut32

SysFreeString
SysAllocString

advapi32

RegCreateKeyExA
RegQueryValueExA
RegDeleteValueA
RegSetValueExA
RegOpenKeyExA
RegDeleteKeyA

shell32

SHGetMalloc

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ