862c4037e7cd136a615ea2f38faff0fd | Triage

Sharing

General

Target

862c4037e7cd136a615ea2f38faff0fd
Size

21KB
MD5

862c4037e7cd136a615ea2f38faff0fd
SHA1

b359ea6999f7927aed52c2add103c08ecacf73c7
SHA256

c26225b782958f273aa012281c0bbe4dff313b5fe24bc425aa1b3ffeb18ae1c9
SHA512

f7ea1680c34613acf3cfd3a021e61c5764d23ae45e449153101be39da982ae456535a45ff52d16ce29f623a433508b6e0d69183acaaf794e4809dc688dff91e8
SSDEEP

384:tVhEwUW52m8zCSqF2l3O9NByPL1GAeRxRiOqZXotVgiO:dEbyJcQ9vmoxLg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
862c4037e7cd136a615ea2f38faff0fd

Files

862c4037e7cd136a615ea2f38faff0fd
.exe windows:4 windows x86 arch:x86

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ