adb5b120b3d080415d6d8cce6911fe42 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

adb5b120b3d080415d6d8cce6911fe42
Size

205KB
MD5

adb5b120b3d080415d6d8cce6911fe42
SHA1

5e4e4c1be4bd091f6695488863d4f4ce7ba2de1f
SHA256

b377f091c7d915f56a350e0740fccacea5a77304a31fd2f5b87555ac4c1f579f
SHA512

eee7e2d92322a44e60b385535427de0f392281b61e9b9cb93bc0dc94056ed5d479733e18982ccc33f63263ac8e41f20d7d17c718984e06ad3af8f67e43f9ab02
SSDEEP

3072:mzoxmoFlRnmGlUf5yz5nXH8iU6eLfPWe/3Xz5d7QTu7nbTY+QEADG/54GF:Tll58kXcf6+PxldtbEUA89

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
adb5b120b3d080415d6d8cce6911fe42

Files

adb5b120b3d080415d6d8cce6911fe42
.exe windows:4 windows x86 arch:x86

713d229bac718a069a5e1ecd8a0b5d3d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
GetCurrentProcess
LCMapStringA
CloseHandle
ExitProcess
LoadLibraryA
CreateFileA

user32

wsprintfA
CreateWindowExA
CloseWindow
CharLowerBuffA
SetWindowLongA

advapi32

RegCloseKey
RegQueryValueA
RegEnumKeyA
RegOpenKeyA
RegDeleteValueA
RegSetValueA
RegDeleteKeyA
RegEnumValueA
RegCreateKeyA

Sections

.text
Size: 164KB - Virtual size: 164KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ