51fac076dd517774d0d8360935974402 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

51fac076dd517774d0d8360935974402
Size

282KB
MD5

51fac076dd517774d0d8360935974402
SHA1

ed83fcbfdc33e24cf79488d97d4e7dd3dcb1bb12
SHA256

a3bad06392851fa92421291d14f767a82921af8a42c058a67a83ea9f4b92a001
SHA512

7788dc5a476cfc6f608cbbc0f570fb0ff9d91c8d2431c3856bc6e6337208705a3313448cfbe51fcfc9a70950c7bbc6f8850165c43d013245717b164e0874354c
SSDEEP

6144:XFTb1MpvDpB7wY4n74fHyjZRVkckpy7u/qbWhpp:XHevVZu7WoZRVMcu/qqhpp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
51fac076dd517774d0d8360935974402

Files

51fac076dd517774d0d8360935974402
.exe windows:4 windows x86 arch:x86

641f55d89cd96b75c8269e4a5e7be8ae

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetWindowsDirectoryW
lstrcatW
CreateFileW
CloseHandle
VirtualAllocEx
WriteFile
GetModuleHandleW
GetProcAddress

advapi32

RegCloseKey

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 269KB - Virtual size: 269KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data4
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data3
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 172B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ