2078cb664d6f1fdfc2e3ce882342562a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2078cb664d6f1fdfc2e3ce882342562a
Size

21KB
MD5

2078cb664d6f1fdfc2e3ce882342562a
SHA1

ac8fb6d59688773adeb315a452603ae1e31c69d5
SHA256

f1da97ea7e7b7f4ca7c3d9f5a6fb4490dad6b16aba6edd1b438d96aef7bf3490
SHA512

285ccc52fd05ebf21ab0ac916c3b23fcffab49e75e1cda6610be214b723965412c9d457652c9244425fee0104c44f7ecb6028d7fc33c7bd8611746c17f090a42
SSDEEP

384:uzz2WUiB73i4EqimKMOKg2NOeGQ+Mx84VfVroFLe0auN+/Jbfcu:uWWD3i4xinPJ2geGQc4Vwi/E+/9f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2078cb664d6f1fdfc2e3ce882342562a

Files

2078cb664d6f1fdfc2e3ce882342562a
.exe windows:4 windows x86 arch:x86

bbc554d4125556120e3279f395f02e92

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
FlushFileBuffers
GetFileTime
GetTempFileNameA
GlobalAlloc
GlobalFree
DeleteFileA
SetFileTime
Sleep
VirtualProtect
WriteFile
lstrcpyA
lstrlenA
CreateFileA
MoveFileA
CloseHandle

advapi32

RegOpenKeyA
RegQueryValueA

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 506B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ