0671c5cfbd0ea6344d096ad46cf0fe17 | Triage

Sharing

General

Target

0671c5cfbd0ea6344d096ad46cf0fe17
Size

25KB
MD5

0671c5cfbd0ea6344d096ad46cf0fe17
SHA1

33a80b4fb446ab1da6457b018b6b3a9a11a184a4
SHA256

6c978b13d3a48cb2590123d5fdf3fbf5945ec0a73621caa32af809ffa22b2fa1
SHA512

085ea0ec4df5e53e1e1fe5981d4b2c457762a4227c08c6ea18c2ec11b293ad132b59a34c380ec034de2ffb5a2858bfefcd8dc8c25f73a7afd0478c40602e8e21
SSDEEP

768:MqbKI+C2pbyw15X/WllPlqZrpvUnYiu+:/KI+C2pWw1kzNq7MnYiu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0671c5cfbd0ea6344d096ad46cf0fe17

Files

0671c5cfbd0ea6344d096ad46cf0fe17
.exe windows:4 windows x86 arch:x86

6aca19fcc834d558ccd0d4e1d52008a7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

msvcrt

strchr

user32

GetCursorPos

shlwapi

SHDeleteValueA

wininet

InternetSetOptionA

shell32

SHGetSpecialFolderPathA

advapi32

RegSetValueExA

ole32

CLSIDFromProgID

oleaut32

SysStringLen

msvcp60

?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ

Sections

.text
Size: 19KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE