663c4f2489b3f7a99c417a29d3752dcf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

663c4f2489b3f7a99c417a29d3752dcf
Size

175KB
MD5

663c4f2489b3f7a99c417a29d3752dcf
SHA1

b59235aef9d727740ddd505e542c293d685e0fcd
SHA256

814a1b024f70c4b738faaa0a95dc780e0ca7292026ff964cadf96f2af1dfe1f2
SHA512

511d6d3c963c21e4b93b4c6f4f8e2f980a915509af1d67887fe0e62f4977afae595718993f81776418aabb2721a725e82944dcbee11eae65d09a4fa7051c6a34
SSDEEP

3072:YltRiRKH6P4XBcFf81ETnXH1sC3leUDN+Fytc/dY7cCa9byHAjuPWW:Yl2X46d8knXHdgU85gcCabyHAqP5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
663c4f2489b3f7a99c417a29d3752dcf

Files

663c4f2489b3f7a99c417a29d3752dcf
.exe windows:4 windows x86 arch:x86

d804fecd9fdf23add60b86ccf25a5ad9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LCMapStringA
LoadLibraryA
GetCurrentProcess
ExitProcess
CreateFileA
CloseHandle

user32

CharLowerBuffA
CreateWindowExA
SetWindowLongA
CloseWindow
wsprintfA

advapi32

RegCreateKeyA
RegQueryValueA
RegDeleteKeyA
RegOpenKeyA
RegSetValueA
RegEnumValueA
RegEnumKeyA
RegDeleteValueA
RegCloseKey

Sections

.text
Size: 127KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ