00e394b2a7d7fa7eb6429ad91140f667 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

00e394b2a7d7fa7eb6429ad91140f667
Size

211KB
MD5

00e394b2a7d7fa7eb6429ad91140f667
SHA1

1621b4ca179135a1f1710a900ef4b59a789f5fe0
SHA256

71f2f6312b1a4b1ced2570c4c1d6484f850a62c0476835532745a725473e59e6
SHA512

bd8d82a330f61682b2db4a6a1cc32bd4f7a0891e7bb35df5f3b91402b0fdaac801c490f424455c60fcb9bb9f3ec365a3c56d4d96b6642fdb20e4ddfe63e14593
SSDEEP

3072:lnRPR3RFC/3ahOzBKD6kdfLwWJSxVghUE:lRBAgtdDwzY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00e394b2a7d7fa7eb6429ad91140f667

Files

00e394b2a7d7fa7eb6429ad91140f667
.exe windows:5 windows x86 arch:x86

15699a2bd1bc3e9cc636b6984c6a0164

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetMenu
GetWindowTextA
GetScrollInfo
CopyIcon
GetScrollPos
CopyImage
DrawTextA
GetWindowTextLengthA
CopyRect
CopyIcon
BeginPaint
LoadCursorA
DrawTextA
CloseWindow
DialogBoxParamA

advapi32

RegQueryInfoKeyA
RegQueryValueA
RegEnumKeyExW
RegDeleteValueA
RegCreateKeyExW

kernel32

ExitProcess
lstrcatA
CopyFileExA
CompareStringA
FormatMessageA
lstrcatA
OpenFile
CopyFileExA

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 168KB - Virtual size: 471KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ