800ac737fa9ff2fb3bd6a1fc52af8ba8 | Triage

Sharing

General

Target

800ac737fa9ff2fb3bd6a1fc52af8ba8
Size

165KB
MD5

800ac737fa9ff2fb3bd6a1fc52af8ba8
SHA1

b5356d450fa7b9fce86746e5291a0baeb122d9d0
SHA256

e93ec0bc28c79d0b3d6b6c3fa9d5f27dc56b3caddaba89dd03871e5e9bac5fc9
SHA512

dd69410b868954b20445a070ca29143d467fb481eea14ac48ecc9eb57bd02081da48ecfcb48e8e3db12b4f88326101a75398e705e1bf0b42d973a46dd9459d14
SSDEEP

3072:+DvWzooTic23f/yy41yB2dqy3pToyrBAl6mLDxOD8O2UH+66fBq/QtD:cFoTicSXvB2dqapTpFAl6+DY/2y4foKD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
800ac737fa9ff2fb3bd6a1fc52af8ba8

Files

800ac737fa9ff2fb3bd6a1fc52af8ba8
.exe windows:4 windows x86 arch:x86

1ae625a5904679f2e0e7bb6b54cc20f2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LCMapStringA
ExitProcess
LoadLibraryA
CloseHandle
CreateFileA
GetCurrentProcess

user32

CreateWindowExA
SetWindowLongA
CharLowerBuffA
CloseWindow
wsprintfA

advapi32

RegOpenKeyA
RegCloseKey
RegSetValueA
RegEnumValueA
RegEnumKeyA
RegDeleteKeyA
RegDeleteValueA
RegQueryValueA
RegCreateKeyA

Sections

.text.EX
Size: 145KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ