530e70c6c6fd78e15322f25dae27653c | Triage

Sharing

General

Target

530e70c6c6fd78e15322f25dae27653c
Size

440KB
MD5

530e70c6c6fd78e15322f25dae27653c
SHA1

d3945f252fe4a6b0031b56b9267501739f521e3b
SHA256

f0000e248f4632c40c53ea58da27c238ea154957ea6a6b8cc1813f17f9648f8e
SHA512

79ef137e6733c4cce54f02c3b47a3aa87bff4f656938332276df3b2a892fdbe93dc54e1ca1389b15e6a61601e900c4ac77c0ede771c0fb75f5abe4b1fccd5433
SSDEEP

6144:HBI+qDjjnNmrADM4PobRTo8rCakUQ/vXV0VG4vq2n5SyTgFN9sRy6oV/kc6zRe:hI+4NmuRgxr9kvlmJl5Sy8FzsM/kcp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
530e70c6c6fd78e15322f25dae27653c

Files

530e70c6c6fd78e15322f25dae27653c
.exe windows:4 windows x86 arch:x86

ea028caee93b31f454408d6fb10a926e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CreateFileA
LCMapStringA
GetCurrentProcess
CloseHandle
LoadLibraryA
ExitProcess

user32

SetWindowLongA
CreateWindowExA
CloseWindow
CharLowerBuffA
wsprintfA

advapi32

RegCloseKey
RegDeleteValueA
RegSetValueA
RegCreateKeyA
RegEnumValueA
RegQueryValueA
RegEnumKeyA
RegOpenKeyA
RegDeleteKeyA

Sections

.text
Size: 124KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ