3115fd98b6e947586b8651f48662eee0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3115fd98b6e947586b8651f48662eee0
Size

178KB
MD5

3115fd98b6e947586b8651f48662eee0
SHA1

b354b90389b83a9766ad59ca058a2556cd49db80
SHA256

aa331d7b77fdf48bdeffc529030b2267ecf09b5f84c15e7a4f6d090e84c796ae
SHA512

de6fb0fca932f2f12ced899fb09b658fd86713e1ff206b6aa1a80a9060f5196380270c9557e17a4a1fadb20c6b6f84bf0127031bb3d7f1f134f01e821d2e162c
SSDEEP

3072:cmKs076TMimQGKEAHQ0ZaCQgmpMx+1rG7frdftqLn:cmKsRAtQGKEkLaCz/MrgrdVUn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3115fd98b6e947586b8651f48662eee0

Files

3115fd98b6e947586b8651f48662eee0
.exe windows:5 windows x86 arch:x86

c5ae93b0b591c596748a39b9ff1fdf45

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegGetKeySecurity
RegEnumValueA
RegDeleteValueA
RegQueryValueExW
RegQueryValueA
RegDeleteValueW
RegQueryValueW

kernel32

GetStdHandle
HeapFree
ExitProcess

user32

CreateIcon
CopyImage

Sections

.jpmmg
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.lcmlp
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pgdmc
Size: 130KB - Virtual size: 405KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nfipg
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.dehjk
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ