74aa04b868851083fbd84ce28fef3aea | Triage

Sharing

Copy URL Twitter E-mail

General

Target

74aa04b868851083fbd84ce28fef3aea
Size

330KB
MD5

74aa04b868851083fbd84ce28fef3aea
SHA1

ff1c40425e4be57f46804268309168cf5887528e
SHA256

592d5cb34ece76490b58045d5cc3d9fde1db34457e76b451daf8067474702174
SHA512

e944effa8add237560d8a7cfebf2dde5cfd0a1788cec8565820816fb5e97f4a81f0428f60d0391ccf4d64c24dedcb6a9b2e892a7052598992430b52017af910d
SSDEEP

6144:PgFfbP/zF3snWH2zOxq6qkjSwwCaCEG6M+0UGB6E2GNmq1Yo6yukMdNcaFpN791:qfbPLF3ukq6bjTwCt6M+0UGEE2GN3eR9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
74aa04b868851083fbd84ce28fef3aea

Files

74aa04b868851083fbd84ce28fef3aea
.exe windows:5 windows x86 arch:x86

89bdb3c549b3dcd6a29d9bc7bf385142

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP

Imports

advapi32

CryptAcquireContextW
CryptHashData
GetUserNameW
RegCreateKeyExA
RegSetValueExA

shlwapi

PathCombineW
PathFileExistsW
StrCmpNIW
wnsprintfA
wvnsprintfA

user32

DispatchMessageA
GetCursorPos
GetIconInfo
GetKeyState
GetMenuItemID
GetWindowLongA
GetWindowThreadProcessId
LoadCursorA
MsgWaitForMultipleObjects
OpenWindowStationA
PeekMessageA
ToUnicode

Sections

.ilazcr
Size: 48KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ezejit
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vsjkn
Size: 6KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ