643f96596d6abee59ea1adb375eebe52 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

643f96596d6abee59ea1adb375eebe52
Size

11KB
MD5

643f96596d6abee59ea1adb375eebe52
SHA1

2f644e2bb0e510cbd14446a9554579095b04378f
SHA256

5e40043d50f51a0d0f27f5565f3b098815c9c73557be9d03df95d98984802cf8
SHA512

fb21fef572f386d408b323a2dcc23072f9a558a6bbe9a9e8f24acfcf7ed35a26f27fa47e620e72b1442ad7f5772ec72cde4220d18ee1097bb13ca16b04ad1042
SSDEEP

192:sAL8zmbCOANZUIBDljL52MlPH3zLXrOXq9h:bLZbCOADUIB5jF2yfrOXq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
643f96596d6abee59ea1adb375eebe52

Files

643f96596d6abee59ea1adb375eebe52
.exe windows:4 windows x86 arch:x86

fbd503ea4356fa3d62c04d1461308203

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
WriteFile
CloseHandle
ExitProcess
GetEnvironmentVariableA
CreateDirectoryA
GetModuleHandleA

user32

PostQuitMessage
DestroyWindow
MessageBoxA
DefDlgProcA
EnableWindow
GetWindowTextA
RegisterClassA
CreateDialogParamA
SetWindowTextA
GetDlgItem
SetDlgItemTextA
SendMessageA
GetWindowLongA
SetWindowLongA
ShowWindow
GetMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
CallWindowProcA
LoadIconA

advapi32

RegCloseKey
RegFlushKey
RegOpenKeyA
RegCreateKeyExA
RegCreateKeyA
RegEnumKeyA
RegSetValueExA

msvcrt

_isctype
strncpy
strncat
_snprintf
__mb_cur_max
_pctype

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ