68826bac5722972374506da4cea5379b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

68826bac5722972374506da4cea5379b
Size

1.2MB
MD5

68826bac5722972374506da4cea5379b
SHA1

66cb26d15405209bdcedf4a9747a0b8f5253c8ef
SHA256

4f09862fef47d31c7b5fb503f5b3dd662e2978e63a7b7e36882e3d553132079a
SHA512

f5454c4651915bca7a0eb7797f4247225bbbc45dc9c22dfad8964c9790c286a79350d8c3f14ea94dc11a80726400a9eec59ed51e6a9f91e56c3400f2e14f8c1a
SSDEEP

24576:7LAjRf0D0jl/w/Bb5QxzAOgYCbdZRpwrOztXVMtppBV5gJRWl45Vh3Rr:7LAeCl/w5ePgTZZHwrCtXVMtbBV+JRE8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
68826bac5722972374506da4cea5379b

Files

68826bac5722972374506da4cea5379b
.exe windows:4 windows x86 arch:x86

971c57396dde2e5d2cc5055b78a7bd25

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CloseHandle
ExitProcess
LoadLibraryA
LCMapStringA
GetCurrentProcess
CreateFileA

user32

CharLowerBuffA
wsprintfA
CloseWindow
SetWindowLongA
CreateWindowExA

advapi32

RegOpenKeyA
RegDeleteValueA
RegCreateKeyA
RegEnumValueA
RegDeleteKeyA
RegCloseKey
RegEnumKeyA
RegQueryValueA
RegSetValueA

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ