133c5e8038e602251dad210a9d3e5c40 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

133c5e8038e602251dad210a9d3e5c40
Size

129KB
MD5

133c5e8038e602251dad210a9d3e5c40
SHA1

958c1b56604da3763275f699a14bd7b692e412d7
SHA256

bba60f284542c71bbb0f090608eaf3ccb18b48f9efee37393a6016fec1fc9b9a
SHA512

c2150ef0fa474ce92d02956d8cb0ea1e546a972ce42db971e6c4d1fe2bb86b8901f9cc1b5b09502552ceea2b969cdc9e0118a36d2add45864a79a1a932e6424d
SSDEEP

3072:gVTjLAtFAtFc7eaWgY9Ml3bqleFAZUrKY7ZM4aJ:gVKFn/YLty/7a1J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
133c5e8038e602251dad210a9d3e5c40

Files

133c5e8038e602251dad210a9d3e5c40
.exe windows:4 windows x86 arch:x86

fe392267c6605239fa01871e67891c39

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindClose
IsBadReadPtr
LocalFree
TlsGetValue
VirtualProtect
CloseHandle
GetDiskFreeSpaceExA
GetCommandLineA
GetLastError
EnumResourceTypesW
IsBadStringPtrA
GetModuleHandleA
FreeConsole
Heap32First
CancelIo
SetLastError
ResetEvent
LoadLibraryExW
GetLogicalDrives
SetLocalTime

advapi32

FreeSid
IsTokenUntrusted
LsaFreeMemory
LsaClose
RegCreateKeyExA
RegEnumKeyExA
GetLengthSid
RegDeleteKeyA
GetFileSecurityW
CloseEventLog
RegCloseKey
RegEnumValueA
RegQueryValueA
RegCloseKey

hnetcfg

HNetDeleteRasConnection
HNetGetSharingServicesPage
HNetFreeSharingServicesPage
DllRegisterServer
DllGetClassObject

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE