2286addb920ced5b4c82167af7bac291 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2286addb920ced5b4c82167af7bac291
Size

51KB
MD5

2286addb920ced5b4c82167af7bac291
SHA1

b17e4f7332d8c1498352d564bd6191dfeed633a6
SHA256

faf645ad35a8db769ac369cab89bd47e48d4a91a6800bdbe8f41d9c4bf6b2dbe
SHA512

6470ad74de3466605921ceb9594c1d30d349493f88d52fc67efc0f6a0238b076f766ff6e1e5ce08f583af2809f30b1d154c6c9c8c1d7f1ad0131d8d7bf53bfba
SSDEEP

768:jJWqLTeNgvX5Eib1rG5ZOXEiq8wR7ReK52Ncsx+NojYeTj1sFz/W2v2sfBhjw:jJWyeuX5rbRGyUiORB2NcsvYASIsk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2286addb920ced5b4c82167af7bac291

Files

2286addb920ced5b4c82167af7bac291
.exe windows:4 windows x86 arch:x86

79cb6bba8c0a93287c914ad46d03aed1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
FreeLibrary
GetCommandLineA
GetModuleFileNameA
GlobalAlloc
GetStartupInfoA

advapi32

RegQueryValueExA
RegCloseKey
GetUserNameA
RegOpenKeyA

msvcrt

strcpy
malloc
strlen
strcmp
memset
strstr
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
realloc

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 876B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ