1d79013e78508a8c720905c2ed8a6a28 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1d79013e78508a8c720905c2ed8a6a28
Size

50KB
MD5

1d79013e78508a8c720905c2ed8a6a28
SHA1

e67f7aa1c723e42633ff623867e662d1c71e782d
SHA256

f80c148e0507a36a5bb1ce58a7d19f909a911e631d84113640afbecdbc889bac
SHA512

fb5b8e0458a87b39f6e17cb54fc88c2fb4919ada9ce289a1adaf5c1753611f45b0c5a0a45361325d6c24886f5a3fa203f2fab0a964654ecc188bcac1d9ce4332
SSDEEP

1536:iC03wAGke1AxHIJLBKdQl/+SwNT3eVwrzD:Tw+AxHIJL4OHeim

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1d79013e78508a8c720905c2ed8a6a28

Files

1d79013e78508a8c720905c2ed8a6a28
.exe windows:5 windows x86 arch:x86

5b2e96c120082b1cc6d0ce075cfb7419

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey

kernel32

ReleaseMutex

shlwapi

PathFileExistsW
PathFindFileNameW
PathRemoveFileSpecW
StrStrW
wnsprintfA
wnsprintfW
wvnsprintfA

user32

DispatchMessageA
FindWindowExA
GetClipboardData
GetCursorPos
GetDlgItemTextA
GetForegroundWindow
GetIconInfo
GetKeyState
GetMessageA
SendMessageA
SetThreadDesktop
ToUnicode

Sections

.tepib
Size: 40KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.twd
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nwz
Size: 5KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ