135fee673d612f0576a6a494a33d260e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

135fee673d612f0576a6a494a33d260e
Size

44KB
MD5

135fee673d612f0576a6a494a33d260e
SHA1

8e60a2a73c62310ea20ce5db53fe9761d3803eee
SHA256

ffefaade53596c50213f2ec5c649dacea06954204ab9a7e2849cfbcb8fba61d3
SHA512

bc3e5ab161e67d11a2c2c1ffdec93e8c845305addfc5485e5e2ac39c83a082e321f0710abf946f975b5727deacd5083cd34f2400744710ae60a3059ce665e496
SSDEEP

768:uhQejdeohADjfyFSkOlgL/H0177sBJoQx:uhbQkO+BoQx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
135fee673d612f0576a6a494a33d260e

Files

135fee673d612f0576a6a494a33d260e
.exe windows:4 windows x86 arch:x86

c042972cd59474f13dd5eccb3f78c1d1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
DeleteFileA
Sleep
CloseHandle
ExitProcess
CreateFileA
GetLastError
GetTickCount
GetSystemDirectoryA
LoadLibraryA
GetProcAddress
WriteFile
FreeLibrary
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
HeapFree
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
VirtualAlloc
HeapReAlloc
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
SetStdHandle
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
FlushFileBuffers

advapi32

RegCloseKey
GetUserNameA
RegDeleteValueA

Sections

.text
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE