96202ae5babf89224ca1b8cf9d3a5e5a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

96202ae5babf89224ca1b8cf9d3a5e5a
Size

16KB
MD5

96202ae5babf89224ca1b8cf9d3a5e5a
SHA1

cd6a05ad3f3ff98b59ce1168d76db47b5c3c717a
SHA256

91da68f259dbb73adaf526d1659ff63701f1f7f9713c205d5ef9e4eb41140f32
SHA512

af28b1cc1a687123aa9cce4c2f9e17b1ace51c1c0a4c713549c10f18c2901c460374e34a0098f6d2def43310438b082866bd75c72a7ce4546c15aa26a7c4da7b
SSDEEP

48:aF2hAM10BSCx1juwJQ7TLSMJ0qEA+2OWs:qBSi1x/MJm2OW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
96202ae5babf89224ca1b8cf9d3a5e5a

Files

96202ae5babf89224ca1b8cf9d3a5e5a
.exe windows:4 windows x86 arch:x86

5ecbbc2807949ec1eb18e5c302ada65f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetThreadPriority
GetCurrentThread
WinExec
CloseHandle
WriteFile
CreateFileA
GetModuleFileNameA
GetCurrentProcess
CreateThread
CopyFileA
lstrcatA
GetSystemDirectoryA
Sleep
GetTickCount
TerminateProcess
lstrlenA

user32

wsprintfA

advapi32

RegCloseKey
RegSetValueExA
RegCreateKeyA

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 614B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE