960a80a16f935a2b52fa9ff86eb13a8e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

960a80a16f935a2b52fa9ff86eb13a8e
Size

157KB
MD5

960a80a16f935a2b52fa9ff86eb13a8e
SHA1

c2aa879a567287f908807a3a0d1fa726e330a8d8
SHA256

78a9ef7b58b1670872ed35580f990677506ee7d1b904d1c3da482a193181d8e2
SHA512

2ffab80c1aadf2959ca6305535affcf0665f1231465971feb21c170a9f37f2c1c7792f9cce51e9928e96f886a44a197e6e4a600ec686dea7e9669484eeb98119
SSDEEP

3072:SpGPLBPGgu9mTYqAuWIng9E1AgTk/dNGIKH+:tLBPG0YaWIeE1AgY/ds+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
960a80a16f935a2b52fa9ff86eb13a8e

Files

960a80a16f935a2b52fa9ff86eb13a8e
.exe windows:5 windows x86 arch:x86

00a53d8ff184ea5fbf401614b3224e3a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

InsertMenuA
DialogBoxParamW
GetDC

advapi32

RegQueryValueExA
RegCreateKeyExW
RegLoadKeyW
RegQueryInfoKeyW

kernel32

OpenFile
DeleteFileW
GetStdHandle
CompareStringA
FormatMessageA
FlushFileBuffers
ReadFile
WriteFile
ExitThread
GetLastError
OpenFileMappingA
GetLocalTime
FindClose
CopyFileA
CreateDirectoryA
ExitProcess
GetFileTime
HeapAlloc

Sections

.gd45
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.b75fc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.9b46
Size: 113KB - Virtual size: 381KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.7bhg
Size: 1024B - Virtual size: 715B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.7ee9
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ