304db9c8897dd27599bc586e891893bd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

304db9c8897dd27599bc586e891893bd
Size

8KB
MD5

304db9c8897dd27599bc586e891893bd
SHA1

b7c4bd03e446333125ab096b07f4d53bf1cb6106
SHA256

77fc6eadc5f0a5d348a9eeef6f7a8d6c0b9adf383b6fbbf8094bfe27ed6dba0f
SHA512

20bad891a1bb866dcea0026fbbe7e3744d27b6c873a4a0e4cf49e9d77ee93d4f05aa7bde1b27e3573ae5d8a275855937df1de41b70ae4575ac5b045260d202e8
SSDEEP

96:XuAz9QbEua6EDLhDR0V9str1aWBryBlSMkmBb3bDrpuVK0plE0J/uHnf4I96nuBo:XV2b6ZhDSV9sP7yVkAylyHQI9jBW7le

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
304db9c8897dd27599bc586e891893bd

Files

304db9c8897dd27599bc586e891893bd
.exe windows:4 windows x86 arch:x86

b0359257853ecb4c9fbd38a625715066

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDriveTypeA
WinExec
GetCurrentThreadId
GetTickCount
GetTempPathA
CreateThread
lstrcpyA
GetPrivateProfileStringA
CopyFileA
DeleteFileA
lstrcatA
GetSystemDirectoryA
GetModuleFileNameA
CreateProcessA
VirtualProtectEx
GetCurrentProcess
GetLastError
CreateMutexA
GetCommandLineA
LoadLibraryA
GetProcAddress
Sleep
GetVolumeInformationA
CreateDirectoryA
lstrlenA

advapi32

RegDeleteKeyA
RegDeleteValueA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegOpenKeyExA

msvcrt

fopen
sprintf
malloc
strstr
_strlwr
fclose

Sections

.data
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE