890766af5fcedc90e74b835b00d443d5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

890766af5fcedc90e74b835b00d443d5
Size

344KB
MD5

890766af5fcedc90e74b835b00d443d5
SHA1

1d412f273e3aa65419b6d953b9c1a501ae326743
SHA256

71575c4c400a16ad8115e7a3cce69a491a152183d9929b5e11af9d1648a047ab
SHA512

b05733c8790bb2e3499a3be491cf6433d016f0fa7c1552a9a43757964bec110552a8ad6904989f43e1f9ee82a37b952f899fd4fef086cf2e36403e7f34c600e2
SSDEEP

6144:epuygIhw1UnM03lVRgqrjRFQFkLwWnUhx8ilrORMb6OV:3ys8M03lVGqrlLwWnWx8mORA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
890766af5fcedc90e74b835b00d443d5

Files

890766af5fcedc90e74b835b00d443d5
.exe windows:4 windows x86 arch:x86

e07123f015931aeb1124a37a7abc6086

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
GetCurrentProcess
LCMapStringA
CloseHandle
ExitProcess
LoadLibraryA
CreateFileA

user32

wsprintfA
CreateWindowExA
CharLowerBuffA
CloseWindow
SetWindowLongA

advapi32

RegEnumValueA
RegQueryValueA
RegSetValueA
RegEnumKeyA
RegCloseKey
RegOpenKeyA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyA

Sections

.text
Size: 322KB - Virtual size: 324KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ