10e2681b1a53d2c77aaddf809281e681 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

10e2681b1a53d2c77aaddf809281e681
Size

500KB
MD5

10e2681b1a53d2c77aaddf809281e681
SHA1

d5f57cdd04ecb8a65b3bcd744e85d7ca1fd9225b
SHA256

dc7b4f98a366a5f137cb78fa4e3821e63d859f7b3f619ce5171b6aec79156744
SHA512

9c6582b1cf701629d9b0f3ddcd7c1a6ca248e09fe5c9b1e832e9f7023838513055987322cf776f69de02eba54013c3939bf12d4df4d073353fe50a144f46ce24
SSDEEP

12288:cYz/uToSEKDTTUToPV9hnv9PAK6K+IL+eHMusSuewfNcua3E6RzU:tUo/ISAfZtZb+O+ei8+NcnE6R4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
10e2681b1a53d2c77aaddf809281e681

Files

10e2681b1a53d2c77aaddf809281e681
.exe windows:5 windows x86 arch:x86

9b0c994fdc48e0e5767fa7cdaf461e26

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
GetCurrentProcess
CreateFileA
CloseHandle
LCMapStringA
LoadLibraryA
ExitProcess

user32

SetWindowLongA
CreateWindowExA
CloseWindow
CharLowerBuffA
wsprintfA

advapi32

RegOpenKeyA
RegQueryValueA
RegCloseKey
RegEnumValueA
RegEnumKeyA
RegSetValueA
RegCreateKeyA
RegDeleteValueA
RegDeleteKeyA

Sections

.text
Size: 464KB - Virtual size: 468KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ