6428721fce86a4849ec4d957ba2caba0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6428721fce86a4849ec4d957ba2caba0
Size

112KB
MD5

6428721fce86a4849ec4d957ba2caba0
SHA1

19cd83a5a2a59e834d071a69dcb0a2992e979b57
SHA256

7640e266a69cd590d82a6ad80a427c185af9e4d07abeae73d43d9e0e48a1dc17
SHA512

1b64b7e16e663297614e3a84f548a12a85e5a52a0f955aaaad51cbf13d246c7ba6eb9aa391c6a8558affa655451489ff84441d40bd2d3fbc0a0fec5ab91266e9
SSDEEP

3072:Y9rYbU8xMoH+DzbJl6IzhVG4WSZ8SE7lUKaniS/rlz20kdSVhQFfSqebsUWS7gHz:YZP8yoeDzb1zhVGRSZ8B7vanimrt2jd5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6428721fce86a4849ec4d957ba2caba0

Files

6428721fce86a4849ec4d957ba2caba0
.exe windows:4 windows x86 arch:x86

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 106KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 1024B - Virtual size: 1023B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE