ad50613be41d611ae61e10fab1da76c9[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ad50613be41d611ae61e10fab1da76c9.exe
Size

404KB
MD5

ad50613be41d611ae61e10fab1da76c9
SHA1

6555703d10ae734e593ccdc520cfd2da012a2b72
SHA256

7dee1d30fb2fc738d3cd4b609a670ee35832906a012df0c76b88f9343ccd4ab5
SHA512

d5f5424292a9c90f3b5187f59e1e49a61a7f5708966b5d48364877d5f616231e5862894220ec31243193deb6ca4a008a13ee31c090d44205257f7b02ef00e01c
SSDEEP

6144:jFDKYmx1Zoq2ECdv11WbZHvLOPXKJnYGZcUQxx2NZ7dJ4LQr1lNccjex:hDKrx1Zoq2EPlaCJnrZcHxx2NZ7j4wLm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad50613be41d611ae61e10fab1da76c9.exe

Files

ad50613be41d611ae61e10fab1da76c9.exe
.exe windows:4 windows x86 arch:x86

89e6b69a029b82c8a61ffea1b0e3b9c1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CreateFileA
ExitProcess
LCMapStringA
LoadLibraryA
CloseHandle
GetCurrentProcess

user32

CreateWindowExA
SetWindowLongA
CharLowerBuffA
CloseWindow
wsprintfA

advapi32

RegDeleteKeyA
RegCloseKey
RegSetValueA
RegCreateKeyA
RegEnumValueA
RegEnumKeyA
RegDeleteValueA
RegQueryValueA
RegOpenKeyA

Sections

.text
Size: 373KB - Virtual size: 376KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ