f70c32cca7a6477f9aa9656a07a8086c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f70c32cca7a6477f9aa9656a07a8086c
Size

165KB
MD5

f70c32cca7a6477f9aa9656a07a8086c
SHA1

1ce640a77473647c3e1a8e3b8029ae9ad102b94e
SHA256

35d4cafda3a8308f1d95f562dccff782ef0c5a849c76c0bec7000688c96e6d37
SHA512

524324e742f3371d930735ad270fc80ac1ce8080b0c6e8847dcca6b99af9698769703201910054edda6822ab1617d92719726bf1e6b74d15c2464b22c012dc60
SSDEEP

3072:d7jgGSx7HAzsnLCv2+MvIOzwdA4zFnWu1k66qw0SIMaH1cAYy06:d7kGSx7WsOv2+/OUdAEWuakwB3aHCXy/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f70c32cca7a6477f9aa9656a07a8086c

Files

f70c32cca7a6477f9aa9656a07a8086c
.exe windows:4 windows x86 arch:x86

bcfa6f9cd303ebade93d990e126afbd5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LoadLibraryA
CloseHandle
CreateFileA
ExitProcess
GetCurrentProcess
LCMapStringA

user32

CloseWindow
wsprintfA
CharLowerBuffA
SetWindowLongA
CreateWindowExA

advapi32

RegSetValueA
RegQueryValueA
RegEnumKeyA
RegDeleteValueA
RegDeleteKeyA
RegCloseKey
RegEnumValueA
RegCreateKeyA
RegOpenKeyA

Sections

.text
Size: 146KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ