650d972d827f7ec7ec1be308c9635c2d | Triage

Sharing

General

Target

650d972d827f7ec7ec1be308c9635c2d
Size

396KB
MD5

650d972d827f7ec7ec1be308c9635c2d
SHA1

30278bbcdb02fe717b6e5b7a4d0e8ad967d3d1e4
SHA256

bcd995268e7c01f52fdbf3807ca7437622196b31840556394827aaad45ce52aa
SHA512

6d205c0bef41a4b6813f0c60de963c400c64d171e56a622fa916fa403a6e04b755adc8d71eae563e09159282728d1654ffbd4790409a92d7d9a26e48721fea4b
SSDEEP

12288:nNHTNdbOvJbqvhauV0ME3MR17YlljAvd:nZ+xqEEk8XsKV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
650d972d827f7ec7ec1be308c9635c2d

Files

650d972d827f7ec7ec1be308c9635c2d
.exe windows:4 windows x86 arch:x86

a925541a45bb2c44f71f46e986ac389a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LoadLibraryA
GetCurrentProcess
ExitProcess
CreateFileA
CloseHandle
LCMapStringA

user32

SetWindowLongA
CloseWindow
CharLowerBuffA
wsprintfA
CreateWindowExA

advapi32

RegCreateKeyA
RegDeleteKeyA
RegDeleteValueA
RegOpenKeyA
RegEnumValueA
RegQueryValueA
RegCloseKey
RegEnumKeyA
RegSetValueA

Sections

.text
Size: 372KB - Virtual size: 372KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ