965a779ccb250959a7cc7357e7e892bb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

965a779ccb250959a7cc7357e7e892bb
Size

163KB
MD5

965a779ccb250959a7cc7357e7e892bb
SHA1

22c9f531a3d0c8e01c011ad74d3ef05d2acf4f79
SHA256

8c16747a57043b2767691c66c77f2e83b831c5a7678c55c4614c91a8cb3434a9
SHA512

b62877b7befcdaf690022e6135427701a1d1d8288ab825175f98b28fa180748f73f15d710430d9a36b0539d0072def5a9b4b1111f26ee7046ec5326dba54e91a
SSDEEP

1536:a/neRC5/wmroN04LYWC1CblMCn5uDI6tlRh7gZVv2MAH6+gv3:a5omrPkounIsYRhcGMzv3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
965a779ccb250959a7cc7357e7e892bb

Files

965a779ccb250959a7cc7357e7e892bb
.exe windows:4 windows x86 arch:x86

796b10f599be0ee9dcf6cd6f77a3794c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ExitProcess

user32

DrawTextExA

gdi32

AddFontResourceA

comdlg32

GetSaveFileNameA

advapi32

RegOpenKeyExA

shell32

ShellExecuteA

ole32

CoCreateInstance

comctl32

ord17

Sections

pec1
Size: 22KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pec
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 86KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE