ad08dbc70160011d8896fde03de59cdf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ad08dbc70160011d8896fde03de59cdf
Size

54KB
MD5

ad08dbc70160011d8896fde03de59cdf
SHA1

e2f1eccf9e71e90fd9285df5205ef95427668b6a
SHA256

25b4b34e26bad8b6637aa21d14a790ea0a1ce6aa056b7ee8cc240e9a609a88cf
SHA512

629c0c4d0365a04edfdaf09b3967b4c592ab0e8766f1aba0623fa5a522eaec3c63357f07f19f70678d55b07134d432aa20210bd6c7784c397035a39e642eb513
SSDEEP

768:WE9lcdyqckal+KtLKMV/8rNHt00lIlaXU2DdPtfom/Yr7rqWMPNNHLri7u8Vo2qr:JgqNZVqN0N8XUG1QlGvHLrsG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad08dbc70160011d8896fde03de59cdf

Files

ad08dbc70160011d8896fde03de59cdf
.exe windows:5 windows x86 arch:x86

1d2b21a0b6e6193c8e584941ce7f66d8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegQueryValueExA

kernel32

GetSystemTime

shlwapi

PathCombineW
PathFindFileNameW
PathRemoveFileSpecW
StrCmpNIA
StrStrW
wnsprintfA
wvnsprintfA
wvnsprintfW

user32

DispatchMessageA
DrawIcon
GetClassNameA
GetCursorPos
GetDlgItemTextA
GetMessageA
GetWindowThreadProcessId
OpenDesktopA
OpenWindowStationA
SetProcessWindowStation
SetThreadDesktop

Sections

.qvuf
Size: 44KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xejil
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xer
Size: 6KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ