116f53411b079c373e6f6467f3d072e0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

116f53411b079c373e6f6467f3d072e0
Size

51KB
MD5

116f53411b079c373e6f6467f3d072e0
SHA1

15a0691410871a9a4410a18676e7191e29e75e7d
SHA256

3ac61ad48057121ee604614001e8d98f4448f5127ba820d7e1681f5e7c5eff3d
SHA512

84deb70a0d7bf962d206bf81e5428bf4a27a93adf139ed178cd0fd370c12e4b60fd3c583030c99af4269a8da57fc86cca1b3191f1909e107deea16b40e4e3f9a
SSDEEP

768:3xyhJvBc/D5lgKhyobVmRwv3+234YCfjG2+GhFTisV0zTrEaKsaAj03UMJd:3Iv6rPU+vJMaVGhFJlaVaA3C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
116f53411b079c373e6f6467f3d072e0

Files

116f53411b079c373e6f6467f3d072e0
.exe windows:4 windows x86 arch:x86

3e139750f3f923769ab91a9d42c5b3c4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP

Imports

advapi32

CryptAcquireContextW
CryptDestroyHash
GetUserNameW
RegCreateKeyExA
RegEnumKeyExA
RegQueryValueExA
RegSetValueExA

kernel32

InitializeCriticalSection

shlwapi

PathFileExistsW
SHDeleteKeyA
StrCmpNIA
StrStrW
wnsprintfW
wvnsprintfA

user32

CharLowerBuffA
CloseDesktop
GetDlgItemTextA
GetIconInfo
GetWindowTextA
MsgWaitForMultipleObjects
PeekMessageA
ToUnicode

Sections

.bangj
Size: 43KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qzkluv
Size: 1024B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.nwr
Size: 5KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ