fea60a9de1a7de4ed8e0c93efa41c41b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fea60a9de1a7de4ed8e0c93efa41c41b
Size

59KB
MD5

fea60a9de1a7de4ed8e0c93efa41c41b
SHA1

057e83f1f9039a5cbe496f2f39cad935c657417e
SHA256

c64171f7932d7752ae741cd61d37857e29a24bde6957eaaf6ea85d455e15125f
SHA512

7b26c2a5338572bdac04d8d4052e700192346dff0df484dcb1f045e2aa5a60d51ac6adfcbf85ad9e13709df7cd728da209cd1413a64d5d18078e3589b0af69f4
SSDEEP

768:1b3EvGnNsjhcsfDxJ+a8CpQBKKvLAtP8ACIwHfWupGu0lluN7cL8CI3YLXyK6t:1TEOnEhcs3EZLAtPCxeupGHl+eNX6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fea60a9de1a7de4ed8e0c93efa41c41b

Files

fea60a9de1a7de4ed8e0c93efa41c41b
.exe windows:4 windows x86 arch:x86

a2beb1f20619de7c13e61c83e8022211

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDefaultLCID
MoveFileExA
SetFileTime
VirtualAlloc
GetModuleFileNameA
WriteFile
lstrcatA
lstrlenA
GetFileTime
ExitProcess
CreateFileA
VirtualFree
CloseHandle

advapi32

RegQueryValueExA
RegCreateKeyExA
RegCloseKey
RegSetValueExA

shell32

SHGetFolderPathA

Sections

.text
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 574B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 548B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE