160db1642ca8a71e28fc5b50e763591e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

160db1642ca8a71e28fc5b50e763591e
Size

15KB
MD5

160db1642ca8a71e28fc5b50e763591e
SHA1

d28de0ddf0ba7b43398a7f6e36dcdf14d6556985
SHA256

52f624ad8be8f9229733fefc27977ed470b993d44c48568aa69937793b47008b
SHA512

fbd79992f3276f7c392b316ecb728b9dcdc2bbafcc16ff3ababa5b1bf0e3d64dbde53a696ccc4ee0a1a6f55b0f74bc0f4c31e36115e32de04e74ec906ce1bcec
SSDEEP

192:0DgV5CllSDsxdXwa5mM8r12S2sWmCTcfe4WDaabW781gW:96BnXp+x2S2sWxTGWDaabW781gW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
160db1642ca8a71e28fc5b50e763591e

Files

160db1642ca8a71e28fc5b50e763591e
.exe windows:4 windows x86 arch:x86

b30d8a45e99c9fbf2a8616812e4bbc0c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
Sleep
ExitProcess
GetLastError
CreateMutexA
CloseHandle
WriteFile
CreateFileA
TerminateProcess
CreateToolhelp32Snapshot
GetProcAddress
LoadLibraryA
FreeLibrary
GetTickCount
GetTempPathA
GetSystemDirectoryA
GetPrivateProfileStringA
lstrcatA
Process32First
GetCurrentProcessId
OpenProcess
Process32Next

user32

FindWindowExA
PostMessageA
GetWindowTextA
GetForegroundWindow
wsprintfA
MessageBoxA
MessageBeep
GetMessageA
keybd_event
DispatchMessageA
TranslateMessage

advapi32

RegCloseKey
RegCreateKeyA
RegSetValueExA

msvcrt

??2@YAPAXI@Z
_except_handler3
_itoa
_stricmp
strrchr
atoi

netapi32

Netbios

Sections

.data
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ