388246c0bcdc96b7b0c163b5bb451f7f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

388246c0bcdc96b7b0c163b5bb451f7f
Size

46KB
MD5

388246c0bcdc96b7b0c163b5bb451f7f
SHA1

0d491b6d95446af5549160a09ae7aa02ddbfd105
SHA256

3f3906a32d9b59dd4a1e2b91a6ec4b2f0abb5cb57d8ebc84399deab60b558d7f
SHA512

c3ec6124b846fc0d22c76a9697fd492e05a4bbd16b4144034dc021bd57a9bd28700ce88eaae49baa410868861b70a807db217ecd4c81d8373f66d9df390afd16
SSDEEP

768:RpEk/jD3xTbfIreqONzzlJa8qwgFMnH5LJZHJ6UOVbupf2YrPZZ3wNUs:Rplb7OyT+8WFMnZ1ZH6upf2uPZdm1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
388246c0bcdc96b7b0c163b5bb451f7f

Files

388246c0bcdc96b7b0c163b5bb451f7f
.exe windows:5 windows x86 arch:x86

0f7d7ba98a3525c9f13517272562cab7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

StrCmpNIA
PathRemoveFileSpecW
StrStrW
wnsprintfA
wvnsprintfW
StrCmpNIW
PathCombineW
PathFileExistsW
PathFindFileNameW
PathMatchSpecW
wnsprintfW
wvnsprintfA
SHDeleteKeyA

advapi32

RegQueryValueExA
CryptReleaseContext
RegDeleteValueA
DuplicateTokenEx
CryptGetHashParam
RegCloseKey
CryptCreateHash

Sections

.erohsz
Size: 36KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.epmz
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.novqz
Size: 5KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ