402b23eb3e092efa3c09ae0f3e08a595 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

402b23eb3e092efa3c09ae0f3e08a595
Size

6KB
MD5

402b23eb3e092efa3c09ae0f3e08a595
SHA1

e90cf132ff74ef48f88f9791290752f00d25edec
SHA256

e8bdcc0cc6244199a974f311a20539f63167544bf3f54bc5ad177db7629896f1
SHA512

15fe34b833ec341e4ea609591d60b93997c8b4957dd3f9b01a8593f218acb2bbe0e40dd2364dfd5f5529afdf70ef1810c64f2e07e0eb91187707eff3b9fd0287
SSDEEP

96:oQaHhXxkBX+WPUER/wvg1aVhLghjukZLtyM:PaHhkFP1AhtkZLty

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
402b23eb3e092efa3c09ae0f3e08a595

Files

402b23eb3e092efa3c09ae0f3e08a595
.exe windows:4 windows x86 arch:x86

f239615a63f56fa000dc15ab59876168

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegCloseKey
RegOpenKeyExA
RegSetValueExA

kernel32

AddAtomA
CopyFileA
ExitProcess
FindAtomA
GetAtomNameA
GetModuleFileNameA
GetSystemDirectoryA
SetUnhandledExceptionFilter

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
fflush
fprintf
free
malloc
signal
strcat

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 304B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 752B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE