241d10ac8c5ae9152d85c99419fbeea2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

241d10ac8c5ae9152d85c99419fbeea2
Size

36KB
MD5

241d10ac8c5ae9152d85c99419fbeea2
SHA1

5496c5974f4fad547b118f15ec52fb73826c68d1
SHA256

b2bcdfc52dfd9e58a1b78351497552177b7637a9d159b7ef5f2464c00e92af21
SHA512

8760754c01753f60b4b80d8a9789f0c329c400ffd1dbd2e38d4d75fa6f2e7c5c6572463a4ac2359454fddb1709dae52c463ca30cd78165235806d6a33dc8ab2c
SSDEEP

768:zkbRHpmF3p1MCNQ3U2LP1esQJmLMBiwBlSNZNNFWaDmU4Jy:zkbdQxq3U2LdewLMBiw2NZTFHDO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
241d10ac8c5ae9152d85c99419fbeea2

Files

241d10ac8c5ae9152d85c99419fbeea2
.exe windows:4 windows x86 arch:x86

8d68c2d66cc9e4a33fa518eb7adf8817

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetFileTime
GetTempFileNameA
GlobalAlloc
GlobalFree
DeleteFileA
SetFileTime
VirtualProtect
WriteFile
lstrcpyA
lstrlenA
CreateFileA
MoveFileA
CloseHandle

advapi32

RegOpenKeyA
RegQueryValueA

Sections

.text
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 462B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ