567772b4e4a90c64a9332013f7e00693 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

567772b4e4a90c64a9332013f7e00693
Size

54KB
MD5

567772b4e4a90c64a9332013f7e00693
SHA1

0a2c44a9a8deb20cdcbd85d90827d3a02b16322d
SHA256

40801bafc9599fd069be61a39bf6000b8e8677d4330af984cae84f67abca6eab
SHA512

f19a134d5dcbda54c4fde1bf0a65c50ec34b393710086f1c70dff63810720ce1acba3de309b22c0993df285b25e3859c5135071719560349f0019c6592cde067
SSDEEP

1536:ezP7rkTaqClm3FqY/h5OZxSAfzTrmf2qsP4osY6EcCf:0jrOaqCY3Fv8L9fznhBPb1f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
567772b4e4a90c64a9332013f7e00693

Files

567772b4e4a90c64a9332013f7e00693
.exe windows:5 windows x86 arch:x86

e4592fccda69a98e7a5c842ad28932ed

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

CryptReleaseContext

shlwapi

PathFileExistsW
PathFindFileNameW
PathMatchSpecW
PathRemoveFileSpecW
StrCmpNIA
StrStrW
wnsprintfA
wnsprintfW
wvnsprintfW

user32

CharLowerBuffA
CharLowerW
DispatchMessageA
EndDialog
FindWindowExA
GetKeyboardState
GetMessageA
GetWindowTextA
PeekMessageA
SendMessageA
SetProcessWindowStation
SetThreadDesktop

Sections

.ytizsr
Size: 44KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.nsd
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bcf
Size: 6KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ