58aa576bd76acc5ad68f2d72f6ee9b25 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

58aa576bd76acc5ad68f2d72f6ee9b25
Size

44KB
MD5

58aa576bd76acc5ad68f2d72f6ee9b25
SHA1

770413e53af82d11dc06df9a11d7ac8143fb10e9
SHA256

2c4cabbf0c6c96d0127a6c42c288497329823bebae7b23fed878cbfd244cb6d9
SHA512

22566cfe345e75e567c4a15a07311d1b7f68d1e84bce8d06ec73fcce7b6730229f1d18bfeb8d04cb0ca7a9de6bd8307ce026ea822ca7f462e4703af456a5124e
SSDEEP

768:mo8F5xd+psZiuzgxYmUUmX6NQesBMo+N:m9eszgezUbow

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
58aa576bd76acc5ad68f2d72f6ee9b25

Files

58aa576bd76acc5ad68f2d72f6ee9b25
.exe windows:4 windows x86 arch:x86

77271ee1c3ca6c483789ae953fd5bf6e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetComputerNameA
DeleteFileA
Sleep
CloseHandle
ExitProcess
CreateFileA
GetTickCount
GetSystemDirectoryA
LoadLibraryA
GetProcAddress
WriteFile
FreeLibrary
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
HeapFree
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
VirtualAlloc
HeapReAlloc
GetLastError
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
SetStdHandle
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
FlushFileBuffers

advapi32

RegCloseKey
GetUserNameA
RegDeleteValueA

Sections

.text
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE