761318d07baab26dc63a9838e98909ea | Triage

Sharing

Copy URL Twitter E-mail

General

Target

761318d07baab26dc63a9838e98909ea
Size

7KB
MD5

761318d07baab26dc63a9838e98909ea
SHA1

607d5c65c5909ea721800a2912df41a04a54055e
SHA256

e855920529bd8c2b2f53d6f74dba10d739c76aea8a7613d16df152814d3ffcee
SHA512

863fb4e14f055f3b2e6516da1d81663ae26737716f139114eb8c4e59c90221701661089de6bc116e69e991314e6918a6fec826e666ca42d8b3d71cf259d120f1
SSDEEP

96:Ye5U3R03/o+ZkBJXtZ+7HJ9KiycN0qZoYE72V5IOmk0jwMZH3VBmMHJPYTwzyEWb:Ye5aR2joA/E6V5IOmfmMpPawTWcOW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
761318d07baab26dc63a9838e98909ea

Files

761318d07baab26dc63a9838e98909ea
.exe windows:5 windows x86 arch:x86

19bc1969a45683f49e74315474f64c48

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_cexit
_XcptFilter
_exit
_c_exit
_strnicmp
_except_handler3
??2@YAPAXI@Z
strstr
??3@YAXPAX@Z
strtok
atoi

advapi32

RegQueryValueExA
GetUserNameA
RegOpenKeyExA

kernel32

GetStartupInfoA
GetModuleHandleA
DeleteFileA
GetModuleFileNameA
GetVersionExA
MoveFileExA
WritePrivateProfileSectionA
CopyFileA
FindNextFileA
FindClose
CreateFileA
ReadFile
CompareFileTime
GetLastError
CloseHandle
FindFirstFileA

wininet

GetUrlCacheEntryInfoA
CommitUrlCacheEntryA

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE