75d659a7bbfae61d12cf6657eb04787f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

75d659a7bbfae61d12cf6657eb04787f
Size

3KB
MD5

75d659a7bbfae61d12cf6657eb04787f
SHA1

805cb607a74b878dd1b9faf8eba58d205b40508a
SHA256

0d97ea967170c364b1ac6aa9ad8f98140851bccded829ee87bc5a200aac6aa1a
SHA512

e9f4d5bb864423c3ed24e7e9e886b926a1d529fb95c5c8d090a430082590dbeabb5b56509a6f3b498b8f70d901163b229ba9c2d3d2872f5c2d794f5016f78c73

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
75d659a7bbfae61d12cf6657eb04787f

Files

75d659a7bbfae61d12cf6657eb04787f
.exe windows:4 windows x86 arch:x86

d5c5a8a68a82324743046494dadef5d3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

StrStrIA

kernel32

GetFullPathNameA
MoveFileA
ExitProcess
Sleep
FindNextFileA
FindFirstFileA
QueryPerformanceCounter
GetWindowsDirectoryA
GetCommandLineA
lstrlenA
FindClose
lstrcatA

advapi32

RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey

shell32

ShellExecuteA

Sections

.text
Size: 512B - Virtual size: 493B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 815B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 11B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE