65dbd98508f0236487c9bf09d473cadd | Triage

Sharing

General

Target

65dbd98508f0236487c9bf09d473cadd
Size

204KB
MD5

65dbd98508f0236487c9bf09d473cadd
SHA1

3733e06ac78ce312f0cea287c7cb711da5e02669
SHA256

23c85b5f1690d9d74a377d5e721cf2586f7acfd5bf4b09620f46ede340c01b89
SHA512

8848fd9abc420c521f8a17eb9c0f372747a85b6f3dccfc127fb152719bfcaea276afecf0c963484a5d70caa7bfc91b0667c9cd36a0fafeee291a12098cf4a066
SSDEEP

3072:fktG1gD8d5W3rNDpfaogXrmbWsIa8ccsCIbCcR7YAnV2mayIVtUG:fktG1Ui5W3rNlUIW96AURjxrr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
65dbd98508f0236487c9bf09d473cadd

Files

65dbd98508f0236487c9bf09d473cadd
.exe windows:4 windows x86 arch:x86

8f79fb7e1d5ec3a753e9c52007e52830

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WinExec
lstrlenA
GetModuleFileNameA
WriteFile
CreateFileA
SetFilePointer
ReadFile
LoadLibraryA
GetProcAddress
CloseHandle
FreeLibrary
GetStartupInfoA
GetModuleHandleA

advapi32

RegOpenKeyExA
RegSetValueExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA

user32

wsprintfA

imagehlp

MakeSureDirectoryPathExists

msvcrt

_strnset
strlen
_except_handler3
??3@YAXPAX@Z
??2@YAPAXI@Z
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 192KB - Virtual size: 191KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE