ac6a488fd21cedb2280a5364db221ccf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ac6a488fd21cedb2280a5364db221ccf
Size

52KB
MD5

ac6a488fd21cedb2280a5364db221ccf
SHA1

b7fbb166fdf578b0bcd8244f1952ddddd68bdc3f
SHA256

5cee8c38dacdb59a21e188c6ac2d2c256ccef8adbc515b2e0fb23add6ac898f7
SHA512

b673ad0520083671bf91508d4161748cc68be385554ad351b3b32a76470465ce577e894a76905bd6ca003fb06871c1e7de07417a0c9f94614ff05ad55393f216
SSDEEP

768:cySZjJNtUQmu+sbybeKgA9cACblwdb7+UO4dpp/tRuML6CiiEJVOF7f5Ei:3SFJNNeb1VJb7+OBtRuq6lp7Ow

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ac6a488fd21cedb2280a5364db221ccf

Files

ac6a488fd21cedb2280a5364db221ccf
.exe windows:5 windows x86 arch:x86

8260b4343ffd2e298c71106eace21fc8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegDeleteValueA

kernel32

GetUserDefaultUILanguage

shlwapi

PathCombineW
PathFindFileNameW
PathRemoveFileSpecW
SHDeleteKeyA
StrCmpNIA
StrStrW
wnsprintfW

user32

CharLowerBuffA
DispatchMessageA
FindWindowExA
GetDlgItem
GetDlgItemTextA
GetKeyboardState
GetMessageA
GetWindowLongA
OpenWindowStationA
PeekMessageA
SendMessageA
ToUnicode

Sections

.hqv
Size: 42KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.twf
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rcj
Size: 6KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ