f94b9b4ad84f4d6a458abd1788982666 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f94b9b4ad84f4d6a458abd1788982666
Size

112KB
MD5

f94b9b4ad84f4d6a458abd1788982666
SHA1

d5ca05b21dd6cafd9f1131870d50361976c25fc1
SHA256

78601cf57eb61d95ca62384dfae2c29b95d5d287dc47355205c9aca620a8e77a
SHA512

928bc694bb4ee15de408fbac374b03cece4679a728b6ef7fc6f05e1b57aeaa3065d95a38990624a31b610d3da743768d4bcb2e2fbf2f497f881eeb182f6220cb
SSDEEP

768:AFQ31uSyZ739lAzebARfo9EcbQLlIgP2Be4KlM19lr5s1AkEHdZ94oA6vaB3NoI1:+IjyZwzerxM7P26lclr5s1LE+N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f94b9b4ad84f4d6a458abd1788982666

Files

f94b9b4ad84f4d6a458abd1788982666
.exe windows:5 windows x86 arch:x86

85c159b3a6656615855f25119fb865d1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapFree
GetCommandLineA
DeleteFileA
CompareStringA
GetLocalTime
CreateDirectoryA
FlushFileBuffers
GetStdHandle
GetPriorityClass
GetCPInfo
lstrlenA
ExitThread
ExitProcess
ReadFile
CopyFileExA
GetLastError
lstrcmpA
FormatMessageA
HeapAlloc
DeleteFileW
GetFileTime

user32

DrawIconEx
CopyRect
GetScrollPos
IsMenu
GetDC

advapi32

RegCreateKeyExW
RegFlushKey
RegQueryInfoKeyW
RegOpenKeyA
RegQueryInfoKeyA
RegDeleteKeyA
RegEnumValueW

Sections

.gf28g
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ebbg
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.e6eed
Size: 54KB - Virtual size: 349KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.442a4
Size: 1024B - Virtual size: 885B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ