ac92a567b8f80c01a88564789d34dd15 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ac92a567b8f80c01a88564789d34dd15
Size

101KB
MD5

ac92a567b8f80c01a88564789d34dd15
SHA1

66c73ae8a0f6455c283f7d0408dee9dafd7d0492
SHA256

e1ca8d16388fb7bafcb4e8d4b2e18831d1628b9eb51dd1865d2d6705cb0c43f7
SHA512

3de64007300004b7868712ef49d5edcf75eeff69edfdc6477c9f44b2a9fee95469168e0d72a98784ca5196e13b5264bd729a267be5d136cbe359d517286057dc
SSDEEP

1536:mR690WkpzzWG9ye9+O84EhxP7IT9IQr6sNDAT/QEHQ2nc9:H21WGgk+ZTC9IQr6sNMT3w2c9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ac92a567b8f80c01a88564789d34dd15

Files

ac92a567b8f80c01a88564789d34dd15
.exe windows:5 windows x86 arch:x86

344f2fece68d1462f97ab14f50148b74

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
ExitProcess

user32

CharLowerA

advapi32

RegCloseKey
RegCreateKeyA
RegOpenKeyExA

shell32

DragQueryPoint

comctl32

ImageList_Copy
ImageList_BeginDrag
ImageList_AddMasked

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 478B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.BSS
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.DAT2
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 400B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 596B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ