580b7c31d8cd5ba29482f55f4225600d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

580b7c31d8cd5ba29482f55f4225600d
Size

40KB
MD5

580b7c31d8cd5ba29482f55f4225600d
SHA1

78c8e29237a4874117bc12c2ee3d5436dbd4445a
SHA256

ac8397c2ff240493433f744f1e61719b61436c2a18ab0bab87b2780e3bb3f78a
SHA512

e161c51814ca3f6d1e5af9fd3c5cdcd9da820be4691c82f8662eb587284d36879333ab333a30e3392da5e56d4596f76d3291b22959ea1944e658a1a968c73892
SSDEEP

384:vASWyTFqShCF9rqSmrJmFmlWSkSezwmjNTty2Yxig910oYK5E0pm1tL:YZAFqRFJq6UQzwmjDkIM10oX3g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
580b7c31d8cd5ba29482f55f4225600d

Files

580b7c31d8cd5ba29482f55f4225600d
.exe windows:4 windows x86 arch:x86

70de0e15ee068111a50e9f88e8714b7a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStringTypeA
GetLastError
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
CloseHandle
TerminateProcess
GetCurrentProcess
SetFilePointer
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
HeapAlloc
VirtualAlloc
HeapReAlloc
SetStdHandle
FlushFileBuffers
CreateFileA
ReadFile
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
SetEndOfFile
GetStringTypeW

user32

MessageBoxA

advapi32

RegCloseKey
RegQueryValueExA
RegCreateKeyA
RegSetValueExA

shlwapi

PathFileExistsA

Sections

.text
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ