161aba78d75f0c63d73a05c680c1ccab | Triage

Sharing

Copy URL Twitter E-mail

General

Target

161aba78d75f0c63d73a05c680c1ccab
Size

113KB
MD5

161aba78d75f0c63d73a05c680c1ccab
SHA1

bca7a126a437c6dcb749409b0124760a02d461f2
SHA256

dbab2a131e9d4daf81b52dc27f74083f23deb335d761542f06668500c6f8b5d4
SHA512

8783e21f8e2412a9d90e72c82997a6801b80b1031ac4724caa23ec755e31cc999390d0d8972ca5fecff98b14a376c31b6d108c6384ac593987a07a4e4a8a9bdd
SSDEEP

3072:jC9tsuQ6VPeDZ1Ldqqn2momYohv0ENK6pnm08W:jC9Gv6VPeDtqqDomBh8I3m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
161aba78d75f0c63d73a05c680c1ccab

Files

161aba78d75f0c63d73a05c680c1ccab
.exe windows:4 windows x86 arch:x86

a66849fa3ced1b03619e81ed92ec6aa7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoGetContextToken
ReleaseStgMedium
CreateOleAdviseHolder
CoReleaseMarshalData
GetHGlobalFromStream
OleCreateStaticFromData
CreateStreamOnHGlobal

kernel32

VirtualAllocEx
GlobalAlloc
LoadLibraryA
DeleteCriticalSection
CreateThread
DeleteFileA
VirtualAlloc

advapi32

RegEnumKeyA
RegQueryValueA

user32

IsMenu
CreateMenu
GetMenu
CreatePopupMenu
CloseClipboard
CharLowerA

Exports

Exports

qZJvN0DHfAglQk@12
1NTozlSmUg
k0t59rpNKwzt
KoXl15bUU7@4
_dmLYa
_Jujj42K2b2uxbI@12
_Far2PbZS
ewBUnNvSG@24
_KM2SIJH@24
_92L3PDepy7
KlnwOMGbX
KJrUez
_9qdxFqsP3T5SX0
_pIndRYfN6LZ0x@8
_CQhzskvLSZ2
_H0Pn_
_zoMIQGCPfsFmW
x1cIS@16
_PsdJN5KJI@4
_CCmp2VEkHqxozD
BXehmLK9VFN1Xh
jZpXHqs6
mGg3q4Pz4
_jPNARH@20
23B40@8
zKLfjIAJu@16

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ