974a0371526cb6e4a1622e83efb51666 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

974a0371526cb6e4a1622e83efb51666
Size

804KB
MD5

974a0371526cb6e4a1622e83efb51666
SHA1

0de14922f7921d7890dd18491adc15c31fb6c717
SHA256

915246f6583bff29d1cc6133ce5e661e757c6b206146884d68b2e8b6a74b1503
SHA512

14883d97d533c9db3c51fc61e56c2fe6630096953f7c2913b855ac7b2eeb9f3635b2de013e2d159d43d213e4e5d8ce15c3a7ba043e05109f42a26c419bec404e
SSDEEP

12288:GfQWNcmRPhGHf9demneyYhxbmL7uDdALmmPjNYzJeudP44ZCl7m4v9ZqSSAIX1ov:Gf1ymR8Hf9deLAL72dALmDl4KmnVZ0HO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
974a0371526cb6e4a1622e83efb51666

Files

974a0371526cb6e4a1622e83efb51666
.exe windows:4 windows x86 arch:x86

c75c8b38fa8ef26d205888addb38a64e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
GetCurrentProcess
ExitProcess
LCMapStringA
CloseHandle
LoadLibraryA
CreateFileA

user32

CloseWindow
SetWindowLongA
wsprintfA
CreateWindowExA
CharLowerBuffA

advapi32

RegCloseKey
RegEnumValueA
RegEnumKeyA
RegCreateKeyA
RegSetValueA
RegDeleteValueA
RegDeleteKeyA
RegQueryValueA
RegOpenKeyA

Sections

.text
Size: 782KB - Virtual size: 784KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ