b812f7e47675d3715e8a61c7a4302986 | Triage

Sharing

General

Target

b812f7e47675d3715e8a61c7a4302986
Size

52KB
MD5

b812f7e47675d3715e8a61c7a4302986
SHA1

941f69d320afceeb94220249c983a916d95d9ee5
SHA256

fcece794a88c88ff3309c32d4eea11556abcce2e5ea45cb43831aa3ed8a652b0
SHA512

3c7b001ae2d91ac82d45825792c37e730d337d4f748d9ea7c78749605618087f3ebc40d5eba69ac6bb9b81b284bb2e45098ebacc7cbb032b3fff60847c0609f4
SSDEEP

768:EZZspnZRVcxJYMgD0D1geEknJ13U+hFIWywI4j5HG8lelP/wTiBVxc6mc4jFd/L9:EZHxJ7ggWWJ1k+vpIiHsxwyO1JgM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b812f7e47675d3715e8a61c7a4302986

Files

b812f7e47675d3715e8a61c7a4302986
.exe windows:4 windows x86 arch:x86

01e4241b7d6bf7fe6cb0c035e05463ab

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AddAtomA
CreateDirectoryExA
CreateFileW
DefineDosDeviceW
EnumSystemLocalesW
ExitProcess
GetLongPathNameW
GetModuleFileNameA
GetNamedPipeHandleStateA
GetThreadTimes
GetTimeZoneInformation
SetConsoleTextAttribute
SetCurrentDirectoryW
SetHandleCount

advapi32

BuildExplicitAccessWithNameA
CryptSetHashParam
GetNamedSecurityInfoW
GetTrusteeTypeA
LookupAccountNameW
LookupPrivilegeNameW
ObjectOpenAuditAlarmW
RegEnumValueW
RegSaveKeyW

shell32

Control_RunDLLW
DllInstall
DoEnvironmentSubstA
DragQueryFile
DragQueryFileAorW
RealShellExecuteExW
SHEmptyRecycleBinA
SHFileOperationW
SHGetInstanceExplorer
SHGetSpecialFolderPathW
SHInvokePrinterCommandW
SheChangeDirExW
SheGetDirA
SheGetDirW
SheShortenPathW

Sections

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 51KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE