2664826037874be10e06cca9f2575688 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2664826037874be10e06cca9f2575688
Size

23KB
MD5

2664826037874be10e06cca9f2575688
SHA1

a0a4a61287f478a6b7484106abfe284d5de9d0ff
SHA256

bdd35f8f215701807d5fc4db6c9520189aa4f4cd02c6debd50bbe5dc60b1bb09
SHA512

68e82ab173a5530551191c489a6eee011b2b23c91f8d1dda55f62324d23304a66e4ed2a4d8e4754f0f286ce764a2e377c2d093cfb19a9f59c11824a35e8d8c26
SSDEEP

384:BguRQAIrD9TeWc6WMYftHY7+T3pz1qHRKQ:Bgu4peWYlHn3px2RK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2664826037874be10e06cca9f2575688

Files

2664826037874be10e06cca9f2575688
.exe windows:4 windows x86 arch:x86

ca5101ba73066a8cde02d19de5dfd54b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegEnumValueA
RegOpenKeyA
RegSetValueExA

kernel32

GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
GetCPInfo
GetACP
GetOEMCP
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
HeapFree
HeapAlloc
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
VirtualAlloc
GetProcAddress
LoadLibraryA

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE