5c0a73cb1091b2b7d025f281838b570a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5c0a73cb1091b2b7d025f281838b570a
Size

8KB
MD5

5c0a73cb1091b2b7d025f281838b570a
SHA1

78c31a8bba5291542994f4d814ea838d3f853455
SHA256

bc5a6ad5652c56b3eb009c0a503006ecaed6537f86f8cba38d505d24c2f419f3
SHA512

76449eeaf3e50b098e53782b86d25f86bf3acaa670c70127a0eb590c131d70cce7c4622baf3acd72eaea403c764579885f80cfe0c8b40eeefd74cf9ca3b7d083
SSDEEP

96:2+c0wV01XfWOdKVMXsUJmoCaQneV2lLmiEFUkputs:IqhHdK7I75uRmiEFputs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c0a73cb1091b2b7d025f281838b570a

Files

5c0a73cb1091b2b7d025f281838b570a
.exe windows:4 windows x86 arch:x86

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ