509e5df47fafe488fcd281252ef42d58 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

509e5df47fafe488fcd281252ef42d58
Size

96KB
MD5

509e5df47fafe488fcd281252ef42d58
SHA1

95a5c323b5d8baf22d2acee531dce125b653dcf3
SHA256

5bc2b41480feeb6f9421f0f022813e2d6bcf61b7d54d5100d15ab6a5b4d98e5a
SHA512

7abf05a2a1c58160a7ecf2066f5c338fac48eac50f9d2ae2f6e7c5383ddbe7d1f52bb0d1f24b162f55b6a2ea1752e7c4e65b46248bb69093b7bc53ee450c2bbd
SSDEEP

1536:OhUYd4hXKeuMqmL4xC0JvjJ/wP17y4kwVTXZOM9E5kvCNy1j1bkO4QfFq0/B/N71:Oj4hawqmLqCSjRwtW4k8TXZOM9E56CNy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
509e5df47fafe488fcd281252ef42d58

Files

509e5df47fafe488fcd281252ef42d58
.exe windows:4 windows x86 arch:x86

14546693be9d28fe651908fca7286b40

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
ReadFile
CreateProcessA
MultiByteToWideChar
IsBadReadPtr
GetModuleFileNameA
GetModuleHandleA
DeleteFileA
GetWindowsDirectoryA
SetFilePointer

ole32

OleCreate

user32

GetSystemMetrics
GetWindowLongA
DispatchMessageA
GetMessageA
DestroyWindow
TranslateMessage
DefWindowProcA
MessageBoxA
PostQuitMessage

advapi32

RegCloseKey
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegSetValueExA
RegOpenKeyExA

shell32

SHGetPathFromIDListA

Sections

.text
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 914B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ