72bd3da4b5d8e93e76827b10066859cc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

72bd3da4b5d8e93e76827b10066859cc
Size

13KB
MD5

72bd3da4b5d8e93e76827b10066859cc
SHA1

4210c5b085582de2fc919fb9b264233e701f8a89
SHA256

3d53393e92fc5eaa53e3f7865a867fe4c706da2cc02bbe76a2d320271d4055f7
SHA512

674705d76a9467deb947e02b815984307ad2c737e8a8af43d2c4c0bb6f5f38440a931b43ca179b5f20148a5445ddc44bb1b103c08c16a2be29e0243cf0b60871
SSDEEP

192:nl4oNL7v7u5K02G+/yxtvAIvxqGokUuhDBp/BIUHzIrOkdzHdz0wXdX4A:l4sfYKbMvAIVRBIeIrddX4A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
72bd3da4b5d8e93e76827b10066859cc

Files

72bd3da4b5d8e93e76827b10066859cc
.exe windows:1 windows x86 arch:x86

c9d8cd1b9b3bbf3c2b38e7f52fe9c67c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

WriteFile
VirtualAlloc
GetLocalTime
GetCommandLineA
AllocConsole
VirtualFree
GetModuleHandleA
CreateFileA
CreateMutexA
ExitProcess
FreeConsole
GetModuleFileNameA
WriteConsoleA
WaitForSingleObject
CloseHandle
GetStdHandle
GetVersion
MoveFileExA
ReadFile
Sleep

ole32

CoInitialize
CoCreateInstance

advapi32

RegEnumKeyExA
RegSetValueExA
RegQueryValueExA
RegOpenKeyA
RegCreateKeyA
RegCloseKey

shell32

ShellExecuteA

user32

CharToOemA

oleaut32

SysFreeString
VariantClear

Sections

CODE
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ