75c656e3151598d8a4ccd49cdb65efe3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

75c656e3151598d8a4ccd49cdb65efe3
Size

328KB
MD5

75c656e3151598d8a4ccd49cdb65efe3
SHA1

d30cf793d20e8da2cb16d877ede03a6c9f322f94
SHA256

521f5699768fa0ac95cae14021537e08e675ed434f642329620db80c7cf0008c
SHA512

290f65466ff7806ec841155a0f1e25a064c7162628c3fd05ee5290e454ab9aa2f32ad8e7eed59b4e2ff8288f4292f7a6e2ad206c23a499d46475c046eb0a999d
SSDEEP

6144:Cl25XzvldJfpqZwuSydYcq2ZjqXooW7oKvFbDhDz79fq:5lnRqWu9dK2ZQZW7oEXhDX9S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
75c656e3151598d8a4ccd49cdb65efe3

Files

75c656e3151598d8a4ccd49cdb65efe3
.exe windows:4 windows x86 arch:x86

e6535ae5e31a6fad5e14ad93130df8bc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReleaseMutex
FindClose
TlsGetValue
GetTickCount
CloseHandle
GetCommandLineA
GetComputerNameA
Sleep
GetLastError
GetExitCodeProcess
GetModuleHandleA
SearchPathA
GetDriveTypeA
CreateSemaphoreA
GetModuleFileNameA
DeleteCriticalSection
SetLastError
CreateMutexA
VirtualProtect
FreeConsole

shell32

SHGetMalloc
DragAcceptFiles
StrChrA
ShellAboutA
ShellMessageBoxA
DragQueryPoint
SHGetDiskFreeSpaceA
DragQueryFileA
SHFree
SHAlloc
DragFinish
SheChangeDirA
SHGetSettings
SHGetNewLinkInfo

mgmtapi

SnmpMgrRequest
SnmpMgrClose
SnmpMgrOpen
SnmpMgrGetTrap
SnmpMgrCtl

advapi32

RegCloseKey

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ