ab9c1fc7174b85dcf9691b926d2af11f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ab9c1fc7174b85dcf9691b926d2af11f
Size

373KB
MD5

ab9c1fc7174b85dcf9691b926d2af11f
SHA1

ebc63b35d06914c4e52d7a3b4bcbe97132b8cfdf
SHA256

d2b7670412cbb8b1dbd70d2cfdc1d962031c9e253580961d04f924d66ff1a18f
SHA512

28937a9660db6c5c0cdf314fb2864ccb25f30db54d0167093d15778c2b7aebe06836409bb9e9b8ae84ea99e185b90b0e786534969f0fd9b913b324e6fe37e0ed
SSDEEP

6144:L05CoKeSY1tLIMDQR2/NKIUOsxWeVFPZhS0+pDPfJDyN0TBTRb3mVGL:LUKeSYXLIQfYOsxWwFPUDPf580ThRbpL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab9c1fc7174b85dcf9691b926d2af11f

Files

ab9c1fc7174b85dcf9691b926d2af11f
.exe windows:4 windows x86 arch:x86

22423eb3058af0ae47f08ce450d03f43

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetModuleHandleA
GetProcAddress

user32

CharNextA

advapi32

RegCloseKey

oleaut32

SysFreeString

Sections

.text
Size: 366KB - Virtual size: 416KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 832B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

linghun
Size: 73B - Virtual size: 73B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE