1527394301ed1ddf28490bc18861327c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1527394301ed1ddf28490bc18861327c
Size

22KB
MD5

1527394301ed1ddf28490bc18861327c
SHA1

6fdb90f08f4e1e4af6cb822eb5edd70ac7b3b0bb
SHA256

9808a34271dfde8896f1bd51b6f9c9f01286e8c6a1aa5ec6cb382357f41189c8
SHA512

77f169c57289e39e67b22c75d09751f569af364283cf1bdc650201d50a21823968913b672d2338e57ce17c3bdeba6b43c0e7aed8425c971069dc0339fcae3f82
SSDEEP

384:2viOww/GIfXIb6x2xz8BQyqqvkD8Y9oxAPEBQgkYtDawxYM52tyA:Wvt2xjDD43QfEL5A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1527394301ed1ddf28490bc18861327c

Files

1527394301ed1ddf28490bc18861327c
.exe windows:4 windows x86 arch:x86

1359a50ea21b312f0f42427815c5f387

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
MessageBoxA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
WriteFile

advapi32

RegQueryValueExA

oleaut32

SysFreeString

urlmon

URLDownloadToFileA

Sections

.text
Size: 21KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE