a080c0e2524854cb49fdbfa31c70efa1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a080c0e2524854cb49fdbfa31c70efa1
Size

189KB
MD5

a080c0e2524854cb49fdbfa31c70efa1
SHA1

3c23af5881dfb43f3dea611187832a7af658f605
SHA256

eb0563597e08df614c857109d814a4e01c5d93d6818dd675b4f19b166a4aae69
SHA512

217a8ceb2606d580ab62349e16c2c40f5ba75ddc7eccc9e1893bdbddc10a87bfccae91220d3557ab917e1517ad5766ee19d5d5db4f305e50c8718c61f49830ca
SSDEEP

3072:MldFlt9o2W2pLEKAwqL0Q/Zh+XD6GSFCKJiGoXyReHs4XLU8vhKV:Mlzltmr24qyODOFpiGoXywXLXm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a080c0e2524854cb49fdbfa31c70efa1

Files

a080c0e2524854cb49fdbfa31c70efa1
.exe windows:4 windows x86 arch:x86

6d8b4b0f9067a0281d170284a6d968c3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CreateFileA
LCMapStringA
LoadLibraryA
CloseHandle
GetCurrentProcess
ExitProcess

user32

CreateWindowExA
SetWindowLongA
CloseWindow
CharLowerBuffA
wsprintfA

advapi32

RegEnumKeyA
RegCloseKey
RegDeleteValueA
RegEnumValueA
RegOpenKeyA
RegDeleteKeyA
RegSetValueA
RegQueryValueA
RegCreateKeyA

Sections

.text
Size: 145KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ