51046176163623317da05220cc54b1af[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

51046176163623317da05220cc54b1af.exe
Size

137KB
MD5

51046176163623317da05220cc54b1af
SHA1

de2d3f047f4df4a8c83f1b068e57465c374c635b
SHA256

64fa5f2b6c3ee555a12d190f9f03eaa56baee47bb6c7e67f7aeeb0a07bf459ae
SHA512

20676e135b149216f9e3ad069fbe69eb1bb7f846e33c39fbf40d0fcb76d72d1a2367213a65a20fa83fcf4368ca114c18ba5eca1e38add0410776a128320095ca
SSDEEP

3072:YP8Lo3G2XGReAtPq5DJdu2DI9tpyB6MREI4rJ3h8mHHry:YPkoZT31u2DutcII4rnn+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
51046176163623317da05220cc54b1af.exe

Files

51046176163623317da05220cc54b1af.exe
.exe windows:4 windows x86 arch:x86

93816e9c48282385d99ddb5867fb435b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathFileExistsA

kernel32

GetEnvironmentVariableA
lstrcatA
lstrcpyA
GetShortPathNameA
GetModuleFileNameA
FindClose
FindNextFileW
FindFirstFileW
GetFullPathNameW
CloseHandle
GetEnvironmentVariableW
Sleep
GetLastError
WritePrivateProfileStringA
GetLocalTime
GetPrivateProfileStringA
GetFileSize
LoadLibraryA
GetVersionExA
SetFilePointer
GetProcAddress
FreeLibrary
DeleteFileA
DeleteFileW
CreateFileA

advapi32

RegQueryValueExA
RegSetValueExA
RegCloseKey
RegEnumValueA
RegCreateKeyA
RegOpenKeyExA

msvcrt

_strcmpi
malloc
sprintf
wcscat
_wcsnicmp
wcscpy
??2@YAPAXI@Z
strstr
_strlwr
rand
srand
time

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 127KB - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE