1082c47445b355d68354bf3ccf1ebe02 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1082c47445b355d68354bf3ccf1ebe02
Size

22KB
MD5

1082c47445b355d68354bf3ccf1ebe02
SHA1

8cbca062580db92a07ca2d5ddc6cb002bbb3a972
SHA256

c392bb7df9045d57ae6c5b3d245f993708a35c64fdecd596ae3390f4ebd464d0
SHA512

5fb5a1daf1ab4d0ba5d428ad07f555d25421806bc9ce4c8457b8f85c7b8a9bbf16f8406fae64d7c2ee29e5e3d2e341bf6cf59778d687a631fbac39b21630881a
SSDEEP

384:/JDRogdnUdCboh5Yj7/lZ7PsWClHPznHZwwe1l3Er:ssnUdCbXlVPsW2zytl3Er

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1082c47445b355d68354bf3ccf1ebe02

Files

1082c47445b355d68354bf3ccf1ebe02
.exe windows:4 windows x86 arch:x86

5d4155fecfb54b99d7d2a7a898c2a883

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetCurrentProcess
GetEnvironmentVariableA
GetFileTime
GetLastError
GetLongPathNameA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
FindResourceA
GlobalAlloc
GlobalFree
LoadLibraryA
LoadResource
MoveFileExA
OpenFile
SetFileTime
SizeofResource
WriteFile
WriteFileEx
ExitProcess
CreateFileA
GetVersionExA
CloseHandle

user32

wsprintfA
MessageBoxA

advapi32

RegCloseKey
RegDeleteKeyA
RegCreateKeyExA

msvcrt

_wfopen

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 930B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ