15b10982e3c424b89fe275bc0e57f65a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

15b10982e3c424b89fe275bc0e57f65a
Size

48KB
MD5

15b10982e3c424b89fe275bc0e57f65a
SHA1

60f975259cc0698f585e2e8cdb9c9dfdb336d04a
SHA256

13d24f8b48f27f9679afc99c0a62b04a4b32c97e44d6889935a6e3fc45ad3b29
SHA512

d508d38874c597ceafc46a40d4a0f64fed2bc5465b83c277df44e72f7c1a96ca2edb74a4cfd231b771d4588f45087f8e4bb6de050514b57b6de12d82adbd4766
SSDEEP

1536:xnMppqPC3Nl4q3xYaQHOFL6KwUfmVLPK9LUML:x3sN3xYPupwUfGKzL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15b10982e3c424b89fe275bc0e57f65a

Files

15b10982e3c424b89fe275bc0e57f65a
.exe windows:5 windows x86 arch:x86

b2f7a4b65c0405f5f66efa8c2ba13523

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

SHDeleteKeyA
PathFileExistsW
wnsprintfA
PathCombineW
StrStrW
PathMatchSpecW
StrCmpNIW
PathFindFileNameW
StrCmpNIA
wnsprintfW
PathRemoveFileSpecW
wvnsprintfA
wvnsprintfW

advapi32

DuplicateTokenEx
RegQueryValueExA
CryptReleaseContext
CryptCreateHash
RegCloseKey
CryptGetHashParam
RegDeleteValueA

Sections

.nytsd
Size: 39KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.yjydgp
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bgjgj
Size: 5KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ