7272a54d2efcb720b6286f617d26aaac | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7272a54d2efcb720b6286f617d26aaac
Size

782KB
MD5

7272a54d2efcb720b6286f617d26aaac
SHA1

9f5c7b824e6881a0f8c681cb3f7478532835bcde
SHA256

56d53c56c3485f56456b2adaa0f5691f05cf2eaeda1495f95581eb5a21e9ea2c
SHA512

3c1396f00c8bfebf63b79c1bcea9ca7d26c863992db349a7d07cb12ba8afb85dc585c385540412f51cf4027408d924a0f29a1360a7d990dd744dd15b7457f29b
SSDEEP

24576:RoQW8oKXxaaVwxVZjSWp0AQx/3oGOqYPAB81u:RdW8oKNVwzZjYTOvP08w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7272a54d2efcb720b6286f617d26aaac

Files

7272a54d2efcb720b6286f617d26aaac
.exe windows:4 windows x86 arch:x86

443a4fc0ae8bf9bedaf895928ad34ec0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegCreateKeyA
RegSetValueExA

kernel32

AddAtomA
CloseHandle
CreateFileA
CreateProcessA
ExitProcess
FindAtomA
GetAtomNameA
GetSystemDirectoryA
GetWindowsDirectoryA
SetUnhandledExceptionFilter
WriteFile

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
fflush
fprintf
free
malloc
memset
rand
signal
sprintf
srand
strlen
time

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 739KB - Virtual size: 739KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 400B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 176B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE