ac7994f59bee3121c7f308362a47442e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ac7994f59bee3121c7f308362a47442e
Size

68KB
MD5

ac7994f59bee3121c7f308362a47442e
SHA1

257659bef6dce0ef8b0f55f1b1912f14ba66dd51
SHA256

288413f545e5caf1f87c487c5fd80844288ad6a0dba7f355dcc873784dd8c6fa
SHA512

45b840ea0094c90668e139a3d1458a5f78997eb46af63ee0a371780ee521b2c71d2890923f90f1fd521caf5e5a2afc170b7d76ff6c98be3bea462aff5585676c
SSDEEP

768:/ra7hFT1VgEdRf3XnHWOxXDFypJd2Sw6HT2zf:/+17vFmpL2F6HTK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ac7994f59bee3121c7f308362a47442e

Files

ac7994f59bee3121c7f308362a47442e
.exe windows:4 windows x86 arch:x86

d0a03841176089474f73ea2f667492a5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFileAttributesA
CloseHandle
FlushFileBuffers
ReadFile
SetFilePointer
WriteFile
CreateFileA
FreeResource
LockResource
GetModuleHandleA
DeleteFileA
GetModuleFileNameA
GetSystemTime
GetCurrentProcess
GetSystemInfo
GetProcAddress
GetLastError
LoadLibraryA
SizeofResource
GetStartupInfoA

advapi32

AdjustTokenPrivileges
OpenProcessToken
LookupPrivilegeValueA
RegEnumValueA
RegCreateKeyExA
RegCloseKey
RegOpenKeyExA

winmm

mixerOpen
mixerGetLineInfoA
mixerGetLineControlsA
mixerGetControlDetailsA
mixerSetControlDetails
mixerClose

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
??3@YAXPAX@Z
__CxxFrameHandler
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ