b720be6843b86ea55207795fc3b244a5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b720be6843b86ea55207795fc3b244a5
Size

26KB
MD5

b720be6843b86ea55207795fc3b244a5
SHA1

0c68e43b562d5a472201e01c3c324b15411a77bd
SHA256

b9d83d2c4601919445510309a1017cb31b40d4365bf361565fdaa339c41030b8
SHA512

29bd67584bebdd47147d21e457bf4250b7be361388123966c1e264c31f43f836001fd97f2c4f700ade6b404d904d6f7c35f5e81b6034c2176d34a09a8322f807
SSDEEP

384:dQvirT7y19CQ5Qmops2cLvsxVtOQMUwT0skhs/9Q:dQqrq1p5+C2crMZR40Bu/9Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b720be6843b86ea55207795fc3b244a5

Files

b720be6843b86ea55207795fc3b244a5
.exe windows:4 windows x86 arch:x86

14b2a1e1ee054b100b047e8e6689e930

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UnmapViewOfFile
DeleteFileA
WaitForSingleObject
CreateProcessA
WriteFile
GetEnvironmentVariableA
MapViewOfFileEx
CreateFileMappingA
GetFileSize
GetLastError
GetModuleFileNameA
GetTempPathA
GetTempFileNameA
CloseHandle
CreateFileA

user32

MessageBoxA

advapi32

RegCloseKey
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA

Sections

.rdata
Size: 1024B - Virtual size: 654B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ