7990917959d649167e61518bd36ce920 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7990917959d649167e61518bd36ce920
Size

164KB
MD5

7990917959d649167e61518bd36ce920
SHA1

d5e0f49fb9cdda38e67b27e25c3293f356f4fa4a
SHA256

7823c4542b079bad8d235c1af84063a0027b81375772ff3166d4dba3cf592253
SHA512

0328a108357f2ce75e88932ac2384233a6d7a26a7ebe52c6ee247eef5637866b3dacef609fb8a28d4175335acdd5e92e626b4980906c5f4c5676e390894da32c
SSDEEP

3072:kJU4KbdDiEtJD5vqa4qNK7TSFRoqr5/00/gn/ALKp03992Y1hyHB1KClV:MKtNtPqaE7TmRRrFl/dLKu3992mi1KUV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7990917959d649167e61518bd36ce920

Files

7990917959d649167e61518bd36ce920
.exe windows:4 windows x86 arch:x86

e15fea883c48137981c05e4886a0a55c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
GetCurrentProcess
LoadLibraryA
CloseHandle
CreateFileA
LCMapStringA
ExitProcess

user32

CloseWindow
CreateWindowExA
wsprintfA
CharLowerBuffA
SetWindowLongA

advapi32

RegOpenKeyA
RegDeleteKeyA
RegQueryValueA
RegDeleteValueA
RegSetValueA
RegEnumValueA
RegEnumKeyA
RegCreateKeyA
RegCloseKey

Sections

.text
Size: 144KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ