104ace98754a0466b040fa69a9c0cde2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

104ace98754a0466b040fa69a9c0cde2
Size

21KB
MD5

104ace98754a0466b040fa69a9c0cde2
SHA1

32067ba63ad4bec8dae3f1dcf2ab3e27104d3353
SHA256

ed30a986987b494b7fa2bd226d217666d7ae19df7a179fe1b46545f89d625b68
SHA512

5029748f60468e595fe6391199061e62ad2ca5c23a7206ecbe8b43e4645b00a6335f356ccbee9098753b92b15c01de0d8ef0d432bac7ce4322ac329ef5a38ca2
SSDEEP

384:yFv+V6Bs1VS2PEKgJY3OHxEOK2YT7Jw2z+vNkk7zRkKN:yFsYOgdKgJY3ayJxkk+x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
104ace98754a0466b040fa69a9c0cde2

Files

104ace98754a0466b040fa69a9c0cde2
.exe windows:4 windows x86 arch:x86

367f09d96aa7534c746883cdeda0bbe8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
SetFileAttributesA
lstrcatA
GetLastError
CreateMutexA
CopyFileA
lstrlenA
GetSystemDirectoryA
Sleep
GetModuleHandleA
GetStartupInfoA

advapi32

RegSetValueExA
RegCloseKey
RegOpenKeyA

shell32

SHGetPathFromIDListA
SHGetMalloc
SHGetSpecialFolderLocation

msvcrt

__setusermatherr
fclose
fopen
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
fprintf
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE