1876d6a9d82b5c6d71839b74e4e4a281 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1876d6a9d82b5c6d71839b74e4e4a281
Size

232KB
MD5

1876d6a9d82b5c6d71839b74e4e4a281
SHA1

86808ab018b16b1a420de6b2e62e9de3b790e60a
SHA256

49e0b3ab9fe9d3d58c26899c9a0b5215e7658af21c24fde20ec52179565708f8
SHA512

df7f51915260fb4f75098015ff74b39ba675281ae157f08f464003893a1a6599d08502c6678f295bc48e5e0bd4b192e5f55aae3442bd7a227777201de9e31af6
SSDEEP

3072:debbCtjSuBAK2YSvShdvUpdyI5sdsEkQKT9M480S1TiN+lmq4kzSSTPmaUgDaWWg:IbbC4Z8SKGdypWEi6BRlR4kvTvHaWV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1876d6a9d82b5c6d71839b74e4e4a281

Files

1876d6a9d82b5c6d71839b74e4e4a281
.exe windows:4 windows x86 arch:x86

5dbfcef19ec02d50636232134e287171

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
GetCurrentProcess
CloseHandle
LCMapStringA
LoadLibraryA
CreateFileA
ExitProcess

user32

wsprintfA
CharLowerBuffA
CreateWindowExA
CloseWindow
SetWindowLongA

advapi32

RegOpenKeyA
RegCloseKey
RegCreateKeyA
RegQueryValueA
RegDeleteKeyA
RegEnumKeyA
RegEnumValueA
RegSetValueA
RegDeleteValueA

Sections

.text
Size: 215KB - Virtual size: 216KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ