b782219d464de8b3a000b9a0c5916e40 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b782219d464de8b3a000b9a0c5916e40
Size

171KB
MD5

b782219d464de8b3a000b9a0c5916e40
SHA1

7b4490837e2de578e60df9cf8cc54a955c7951b0
SHA256

58fc737a82d9a4644282f55ece1a2367868690c60a4b0110386cafcef66dd81a
SHA512

6b7bd9c24761dbdd3e375f1a87fb8d0f449cc0b8d4bc2bf365a09086f7dbfd3fa35df026c0cfce54b7e93680a6be9b39eaab1bf2dab35e7934d677a7d9156633
SSDEEP

3072:0/F0r/nsw6A+J26uo14TfgtKG5IsJ/e9Q8zlhDyK8dRRWkNhOX00lm4edjV:yy3v/aagMMIsJkQ8znyK8d+kqxm9j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b782219d464de8b3a000b9a0c5916e40

Files

b782219d464de8b3a000b9a0c5916e40
.exe windows:4 windows x86 arch:x86

c52afc25c7f5cf9b5e687d84cf9af80c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryExW
GetConsoleCP
AddAtomW
HeapAlloc
WriteConsoleW
HeapFree
TlsSetValue
MapViewOfFile
UnmapViewOfFile
SetLastError
TlsFree
TlsGetValue
GetModuleHandleW
EnumResourceNamesA
TlsAlloc
CreateFileMappingA
CreateFileA
GetLastError
GetConsoleMode
GetModuleHandleA
CreateFileW
ExitProcess
FlushFileBuffers
VerLanguageNameA
GetProcessHeap
GetVersionExA
GetVersionExW
InterlockedDecrement
GetTempPathW
GetEnvironmentVariableW
InterlockedIncrement
Sleep

winmm

mciSendCommandW
sndPlaySoundW

setupapi

CM_Get_Depth_Ex
SetupDiGetDeviceRegistryPropertyA
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

shlwapi

PathAddBackslashW

Sections

.text
Size: 93KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ