576167d64417047f3f9b2be83b7e9670 | Triage

Sharing

General

Target

576167d64417047f3f9b2be83b7e9670
Size

25KB
MD5

576167d64417047f3f9b2be83b7e9670
SHA1

b7f2238a79a740619920e1334cc43b7ac3d747f2
SHA256

01f14ffaa1d7bc7f5d60fd2e59925630d86118d169eff6a109a9a346af987979
SHA512

e1f9e6bc9a2f283e4b969b34a23b56ad0b50b1c610371fb93822ddec9c36c489d0623021ce005bbf2543d43794ac79164f70810930e8780dc96a625b7862ce95
SSDEEP

768:4nbwIN7T/ayGI9Puu9tYdaRus4yukv2j:40INX/a8rYdau8uk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
576167d64417047f3f9b2be83b7e9670

Files

576167d64417047f3f9b2be83b7e9670
.exe windows:4 windows x86 arch:x86

6c2d9ac46c5667ddec9e0ba868b43e30

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LCMapStringW
GetStringTypeA
WriteFile
MultiByteToWideChar
SetHandleCount
GetStringTypeW
GetModuleFileNameA
lstrcpynW
LCMapStringA
GetStdHandle
GetACP
lstrcatA
GetOEMCP
GetVersion
GetFileType
GetCommandLineA
CreateFileA
lstrcpyA
GetCurrentProcess
SetFilePointer
GetCPInfo
GetStartupInfoA
lstrcpynA

user32

IsMenu
GetFocus
GetDC
GetMenu
CreateIcon
DialogBoxParamA
InsertMenuA
CloseWindow
CopyRect
LoadCursorA
DrawTextA
CopyIcon
IsWindow
LoadMenuA
DrawTextW
GetWindowTextA
GetWindowTextLengthA
DrawIconEx
GetDlgItem
DialogBoxParamW
EndDialog
CopyImage
GetCursor

comctl32

MenuHelp
ImageList_Copy
ImageList_LoadImageA
ImageList_GetIconSize
CreateUpDownControl
ImageList_EndDrag
ImageList_AddIcon

advapi32

RegDeleteValueW
RegEnumValueW
RegCreateKeyExW
RegDeleteKeyA
RegSetValueW
RegCreateKeyA
RegOpenKeyW
RegCreateKeyW
RegSetValueA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ