2902a5968526b594c1983f7230f322a0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2902a5968526b594c1983f7230f322a0
Size

124KB
MD5

2902a5968526b594c1983f7230f322a0
SHA1

c46adab79a900be78d227468084cc22362624d4b
SHA256

c1672b31dba2c715bd7aaddd0dda75a76c30a787ff08004f87fcd98007a26407
SHA512

326ddcd082814e96ab9a424a56b5bb9bf1f7fca3f9147081c00efe68d8d1919419db84039e9d00477fc0b6c1290a314f4e4093a79b4358c82ce2615e887eae26
SSDEEP

3072:5inZswpMeE8gC+ARu2VIesvRUA2cUqa+:8nZswpMeE8gC+ARu2VIespU30a+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2902a5968526b594c1983f7230f322a0

Files

2902a5968526b594c1983f7230f322a0
.exe windows:5 windows x86 arch:x86

e37058ed5a60404fc831b546bfc07c95

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCreateKeyExW
RegEnumKeyA
RegGetKeySecurity
RegQueryValueA
RegQueryInfoKeyW
RegEnumValueW
RegCreateKeyA
RegEnumKeyW

kernel32

ExitProcess

user32

GetDC
GetScrollInfo
IsMenu
IsWindow
InsertMenuA
GetFocus

Sections

.780g
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.eg7f
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.hf4h4
Size: 65KB - Virtual size: 397KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.h23c
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.e77d
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ