397678755717ec77224f8ed1773438a9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

397678755717ec77224f8ed1773438a9
Size

101KB
MD5

397678755717ec77224f8ed1773438a9
SHA1

2744956087ceaf7635feec618fc3301a08825642
SHA256

7d6dd0a6f6b2049d242f1763310a6fb49d66c90f52aff800c4051ae5619a8cad
SHA512

abcbf4ec1373fea363bdedb40781ba68f8fcd7904068451903e0f01a21c6172c70753ec3f7ab16522e8a49dcbb5686e39a94ecb96c6e6f80e41ad8dc1c0b58fa
SSDEEP

1536:YRJx90WkpzzWG9ye9+O84EhxP7IT9IQr6sNDAT/QEHT2nc9:c21WGgk+ZTC9IQr6sNMT3z2c9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
397678755717ec77224f8ed1773438a9

Files

397678755717ec77224f8ed1773438a9
.exe windows:5 windows x86 arch:x86

344f2fece68d1462f97ab14f50148b74

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
ExitProcess

user32

CharLowerA

advapi32

RegCloseKey
RegCreateKeyA
RegOpenKeyExA

shell32

DragQueryPoint

comctl32

ImageList_Copy
ImageList_BeginDrag
ImageList_AddMasked

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 478B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.BSS
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.DAT2
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 400B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 596B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ