168d536dbbd496a5b902d06ba927af7afd4fef7acbc556f9e84d34701eff42ec | Triage

Sharing

Copy URL Twitter E-mail

General

Target

168d536dbbd496a5b902d06ba927af7afd4fef7acbc556f9e84d34701eff42ec
Size

2.0MB
MD5

f8353a481a5e2274e16cca5c245e2e1a
SHA1

41f4c23787026b03e8b774343379cf95532f8508
SHA256

168d536dbbd496a5b902d06ba927af7afd4fef7acbc556f9e84d34701eff42ec
SHA512

b89a4f56010a0b364f3fab562cc275d0640799a1209ee85cfe3d51e8b06f8179fedf14aa8bfff0b93f7eb0fad4652188997438303027bddd101237830768e888
SSDEEP

49152:3L/3XDKjIe+Pqs5fF2XN7/GCmzCApgyLZcE6P7jgYcJek:7PXjSEF0OCmGACymEajgYC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
168d536dbbd496a5b902d06ba927af7afd4fef7acbc556f9e84d34701eff42ec

Files

168d536dbbd496a5b902d06ba927af7afd4fef7acbc556f9e84d34701eff42ec
.exe windows:4 windows x86 arch:x86

8994195ab24daed12b728bbdce6a3a65

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CloseHandle
ExitProcess
LoadLibraryA
GetCurrentProcess
CreateFileA
LCMapStringA

user32

wsprintfA
SetWindowLongA
CharLowerBuffA
CloseWindow
CreateWindowExA

advapi32

RegEnumValueA
RegDeleteValueA
RegDeleteKeyA
RegOpenKeyA
RegQueryValueA
RegCloseKey
RegSetValueA
RegCreateKeyA
RegEnumKeyA

Sections

.text
Size: 4KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ