5425f5b76902d042977f0ea6f248aa57 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5425f5b76902d042977f0ea6f248aa57
Size

209KB
MD5

5425f5b76902d042977f0ea6f248aa57
SHA1

c02c4bab7a968fca12998864011f0dea2533fae7
SHA256

72808d0dac5ada71312ff9c58eee1fa0df4d8ebde934c5bf8cb954d1791bfd33
SHA512

c17e64dff4fe2b29e8fa2cdd9d10a956e97659766caa367cbefe6e5d515cf311dcabb626ed8ab092989ac48ff76f132b947846343fb89cc2f205aa02d4b9fec7
SSDEEP

6144:LAwoVAeLOMXCh/3cWT2jS7/t/JfGAHx0t:LzqA6fXCBcWajE/t/JfRx0t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5425f5b76902d042977f0ea6f248aa57

Files

5425f5b76902d042977f0ea6f248aa57
.exe windows:4 windows x86 arch:x86

40d9bc595e3ca023dd9b94259b941700

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LCMapStringA
ExitProcess
CloseHandle
GetCurrentProcess
LoadLibraryA
CreateFileA

user32

CreateWindowExA
CloseWindow
CharLowerBuffA
SetWindowLongA
wsprintfA

advapi32

RegDeleteValueA
RegQueryValueA
RegOpenKeyA
RegCloseKey
RegCreateKeyA
RegSetValueA
RegDeleteKeyA
RegEnumValueA
RegEnumKeyA

Sections

.text
Size: 162KB - Virtual size: 164KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ