04dfe283b8b8f3d0db2f6e89ad7aaac5 | Triage

Sharing

General

Target

04dfe283b8b8f3d0db2f6e89ad7aaac5
Size

17KB
MD5

04dfe283b8b8f3d0db2f6e89ad7aaac5
SHA1

e7ccddc23ab41c0346026614f9f5ed4b518cd6ec
SHA256

2ef4e8047f673f0e2fa731900aab1cbccf000cded1de814f990dcdc002155118
SHA512

3b6feb701016bec03a638ce361f29a8c4f1e549a21b8520f37778efd5fd8a5df8192129b00cdde0c90bdedb8348dc3a8fbf19f0fa2558fa6b6e02985c44b96ce
SSDEEP

384:nFwNsjD/cmZO2Zp+Nye8pqrmub8TyztsDN:nmgD/oKK8o8TyJc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04dfe283b8b8f3d0db2f6e89ad7aaac5

Files

04dfe283b8b8f3d0db2f6e89ad7aaac5
.exe windows:4 windows x86 arch:x86

1e4c0da5737da53aff5e6e0ab7de1efa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetModuleFileNameA
GetSystemDirectoryA
GetWindowsDirectoryA
ExitProcess
OpenMutexA
Process32First
Process32Next
Sleep
CreateToolhelp32Snapshot
CreateMutexA
CopyFileA
OpenFile
CloseHandle
FindClose
FindFirstFileA

advapi32

RegOpenKeyExA
RegCreateKeyA
RegCloseKey
RegSetValueExA

shell32

SHGetSpecialFolderPathA
ShellExecuteA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 692B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE