UNREG[.]EXE | Triage

Sharing

Copy URL Twitter E-mail

General

Target

UNREG.EXE
Size

18KB
MD5

9ca3182886da5a836ae47b48bd985398
SHA1

263a5cb73c827bf0372b83ab3de7c4f5f3052126
SHA256

81a5bb863b0c13f71f48c19e774050cf053ffc2f037753bf8e109b821e825a53
SHA512

e2cbb939ddefacb503f2d068e7b7b71d775a0df28977a02f0cd21cb8e4f9673089b28f7c3b5fdf3d89fbe864bf3cc3b4c40876200870b77522648a1eb42bc308
SSDEEP

192:Mr5ChYW242r7A7sp0VJOrc1CI73OFzNoBa/NIYvEY9tESrzL6hlbzfAVt1Yx3API:25Cp2BAiQ0pPhES3L6Pn4X1EoI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
UNREG.EXE

Files

UNREG.EXE
.exe windows:1 windows x86 arch:x86

9b6fdb63b128ebd22c6ab6c08f372a12

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

GetCPInfo
GetStdHandle
FreeLibrary
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetStartupInfoA
GetEnvironmentStrings
GetCommandLineA
GetVersion
ExitProcess
RtlUnwind
UnhandledExceptionFilter
GetModuleFileNameA
GetACP
GetOEMCP
VirtualFree
GetCurrentThread
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
FatalAppExitA
GetLastError
VirtualAlloc
WriteFile
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 716B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ