0ad4ccbb7fc316e1855224d9ce026985 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ad4ccbb7fc316e1855224d9ce026985
Size

163KB
MD5

0ad4ccbb7fc316e1855224d9ce026985
SHA1

89bb4fde9d5b87c2f9a592c1a18f056564a5b20d
SHA256

bdce5e683fa1179c6a20f368ce73409912f59a36394e72e6580af289aa9b6012
SHA512

48dde3d986e2f7be0178ad613258745b187f701edf15ec5591db59c8e2fc63463d7a467ebb82b832fd14fab3b5a72f74069dba74b59d9390340f91255cd1f1d5
SSDEEP

3072:wWSzoNpY2IiU4gpNm4Yb2C+iATK1fYeI/fx:vNpYT1LNm4YXhlzI/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ad4ccbb7fc316e1855224d9ce026985

Files

0ad4ccbb7fc316e1855224d9ce026985
.exe windows:5 windows x86 arch:x86

b5740cd5834f4b4c26e0a02a4da08599

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess

user32

CreateIcon
GetWindowTextLengthA
LoadCursorA
InsertMenuA
AppendMenuW
IsMenu

advapi32

RegDeleteKeyW
RegDeleteValueA
RegCreateKeyA
RegOpenKeyExA
RegQueryValueExA
RegGetKeySecurity
RegQueryValueExW
RegFlushKey

Sections

.bahb
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.najjk
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ppllo
Size: 118KB - Virtual size: 486KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.henk
Size: 512B - Virtual size: 506B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bbhnb
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE