74b933b9805cffbfdc027361d5653966 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

74b933b9805cffbfdc027361d5653966
Size

30KB
MD5

74b933b9805cffbfdc027361d5653966
SHA1

69596e3b023d8d0dec982c51bcd07089341ab1bf
SHA256

c6ef18ec7a4c31a429be9e38c90bed7ab80a5ef4e5f29dfb70637158bc1b6a46
SHA512

b84485a52b7d699bf126da05b8341718c097be26654ed151f48f990b722a06cf1d12051abd298b0d560aad6ed90cef19e4711bec6405664943a809e50173f850
SSDEEP

768:4k5jfGfHpHMKxi1WuN9Bah2o4Ql8oyl18:4k5jfGfJsK29BPoUoS18

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
74b933b9805cffbfdc027361d5653966

Files

74b933b9805cffbfdc027361d5653966
.exe windows:4 windows x86 arch:x86

6f64a54fd37c3a76db62769b12c0ff89

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeResource
WriteFile
SizeofResource
CreateFileA
SetFilePointer
LoadResource
FindResourceA
GetProcessHeap
RtlUnwind
CloseHandle
GetModuleFileNameA
WritePrivateProfileStringA
GetLocalTime
GetTickCount
GetSystemDirectoryA
Sleep
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
HeapAlloc

user32

wsprintfA

advapi32

RegQueryValueExA
RegSetValueExA
RegOpenKeyExA
RegEnumKeyA
RegCloseKey
RegCreateKeyExA

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 878B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 800B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ