95e977f3669065ce03af4f1a19767ab4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

95e977f3669065ce03af4f1a19767ab4
Size

51KB
MD5

95e977f3669065ce03af4f1a19767ab4
SHA1

c573b1560ec0ddd45400f7a1aca77d49c32965d4
SHA256

3b6369099b5d7433a38b2f271b9c26290cc8bc3ccba8b333ae627ad9d2d5c266
SHA512

60e7c3915ce09cd747a8446ade141d96c9f76cc0d10cb9a235b4589e1993d95cc5207f5a1c760a2830c45ce554aac44f3de12610bbeeae1ce9928bfd46bc31b6
SSDEEP

1536:+GwOIzY7pdi6PKFs07sbDYMBETFsBdCNnD:BwOIzY7+4KFsr3YRG8D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
95e977f3669065ce03af4f1a19767ab4

Files

95e977f3669065ce03af4f1a19767ab4
.exe windows:5 windows x86 arch:x86

dccb7bbf420aae4b0d53f8ce61ad9162

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP

Imports

advapi32

CryptAcquireContextW
CryptDestroyHash
CryptHashData
GetUserNameW
RegCreateKeyExA
RegEnumKeyExA

shlwapi

PathCombineW
PathFileExistsW
PathFindFileNameW
wnsprintfA
wnsprintfW
wvnsprintfA
wvnsprintfW

user32

DispatchMessageA
GetClassNameA
GetClipboardData
GetCursorPos
GetDlgItemTextA
GetMenuItemID
SetProcessWindowStation
SetThreadDesktop

Sections

.jyp
Size: 42KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.mxyfmd
Size: 1KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.longh
Size: 5KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ