093852e749f532c8df1986eefb587575 | Triage

Sharing

General

Target

093852e749f532c8df1986eefb587575
Size

6KB
MD5

093852e749f532c8df1986eefb587575
SHA1

82de817cb514a01f51214d57bd7f4b5deb179c01
SHA256

04397ab578a1fd52b4768573789e69a28b5a88379b0a9ff5b0c7d030be793110
SHA512

06b9575e2ccdd54284a6245d11cd1dd2a3a2b521d3b037b3f522121894de6e7c2c3259af7532d0fa7dab6b4edc6d1c3294dbec821c90a16dabb53cdfc0be7fb2
SSDEEP

96:GjfNXRd/KgtxOn/xKoMUFYFLPi6OEIpetaC8rv3glUmzg74VIHbT8dDUD:CRu/FStlTz5IHX8dD8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
093852e749f532c8df1986eefb587575

Files

093852e749f532c8df1986eefb587575
.exe windows:4 windows x86 arch:x86

5814bd273cfa778a6a771df614e37559

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameW
WideCharToMultiByte
lstrcpyA
lstrcatA
CreateEventA
HeapAlloc
GetProcessHeap
HeapFree
Sleep
ExitProcess
WaitForSingleObject
GetCommandLineA
SetEvent
CreateThread
CreateProcessA
ExitThread
CompareStringA
Process32Next
Process32First
CreateToolhelp32Snapshot
CloseHandle
GetFileAttributesA
SetFileAttributesW
WinExec
GetModuleHandleA
SetFileAttributesA

advapi32

RegOpenKeyA
RegQueryValueExA
RegCloseKey

user32

CreateWindowExA
TranslateMessage
DispatchMessageA
MsgWaitForMultipleObjects
DestroyWindow
PeekMessageA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE