975a20f7154a4516c043e17fbec24b72 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

975a20f7154a4516c043e17fbec24b72
Size

177KB
MD5

975a20f7154a4516c043e17fbec24b72
SHA1

a297dcf6e80a9a5a55f7413ca98343346f617391
SHA256

b29ec6956fe613549afd1a7b5a90db544d049d3fec2e914118542ec0ff7e9f5c
SHA512

692fbc3df5473183cc0f4ed682597d911d8958b33ec2e733099e41fe44beda8d537bc46b504a6844f56c77a3b5d484f07f5197a9c7f654696ee0d6bafe2888a9
SSDEEP

3072:FQZbSvhSjiI/AjsW0kn05F0uNeqgFqcnSk4hGBPOSsZLzZmSd4:FWbSVwGUk05jjvcnSlc8fBZDy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
975a20f7154a4516c043e17fbec24b72

Files

975a20f7154a4516c043e17fbec24b72
.exe windows:4 windows x86 arch:x86

410efdde548867b1fde9741296ca4821

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCreateKeyExA
RegQueryValueExA
RegCloseKey
RegOpenKeyA
RegOpenKeyExA
RegEnumKeyExA
RegDeleteKeyA
RegSetValueExA

winmm

timeEndPeriod

shell32

Shell_NotifyIconA

rpcrt4

NdrFixedArrayFree
UuidCreate

kernel32

FlushInstructionCache
FindResourceExA
GetModuleFileNameW
DuplicateHandle
EnumResourceNamesW
SetCalendarInfoW
FindFirstFileA
UnmapViewOfFile
MapViewOfFile
FindClose

Sections

.text
Size: 107KB - Virtual size: 107KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 788B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ