65af4452a0f0f3d13e101bcaa0d0c34b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

65af4452a0f0f3d13e101bcaa0d0c34b
Size

54KB
MD5

65af4452a0f0f3d13e101bcaa0d0c34b
SHA1

3193b5f920e7009369aa06e88f9fef677e13a44b
SHA256

55d35e254d89c2832e79889b0f76aa1ace9d0a5ff9f86f8e572961dedf312065
SHA512

9cfca0572c1c361447ea733f17deea26cf65cd1c8f5349963af1fd2ee9a97a05e54e20e89bcc512b4f9696064cffc4db9134aae7d719d063feda25ab46af18b7
SSDEEP

1536:CDONH0IyZ+znc/u1cXgZ/YBT7Vpz3K0sB7thbLuQpKE:Ct7Wc/uiu/YDpGzhT2CKE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
65af4452a0f0f3d13e101bcaa0d0c34b

Files

65af4452a0f0f3d13e101bcaa0d0c34b
.exe windows:5 windows x86 arch:x86

b3a91623d936909b45df35d591a26f7e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegDeleteValueA

kernel32

LeaveCriticalSection

shlwapi

PathCombineW
PathFileExistsW
PathFindFileNameW
PathRemoveFileSpecW
SHDeleteKeyA
StrCmpNIW
StrStrW
wnsprintfW

user32

CloseDesktop
EndDialog
ExitWindowsEx
GetDlgItemTextA
GetForegroundWindow
GetKeyState
GetMessageA
GetWindowTextA
OpenDesktopA
SetProcessWindowStation

Sections

.lonqj
Size: 44KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vsvap
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xgbol
Size: 6KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ