c0829168c451c4a5ca75fb936d75ecbd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c0829168c451c4a5ca75fb936d75ecbd
Size

73KB
MD5

c0829168c451c4a5ca75fb936d75ecbd
SHA1

6fcb982f8147ad54adbad7cf583e0cee9f59c325
SHA256

bdcb2bbf90a7cd17565b78f0f47de2a374ba89fcbffc2811ba94c29e4e6cb6f9
SHA512

7b50d5202f9acf9ff82013a08bc0ee6e20de19afdf9c7da2fab6b30c2a815f477acab7d6d59c194effc4c7347f9efd13fcc4d0db0b8b4546a8d54ddd693ade6f
SSDEEP

1536:CLn+LKCsF0gQuYVeoFsODxn+4c6CGO3GUyeiqSr3mZLvUkxllMNv5TTwtLK:CLn+LKCsF0gQuYVeOsr4/6ZLUkxlONvD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c0829168c451c4a5ca75fb936d75ecbd

Files

c0829168c451c4a5ca75fb936d75ecbd
.exe windows:4 windows x86 arch:x86

c305288a3c660c2399576c89ca953446

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindNextFileA
FindFirstFileA
SetFileAttributesA
OpenEventA
GetWindowsDirectoryA
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetProcessHeap
HeapFree
CloseHandle
Process32Next
Process32First
CreateToolhelp32Snapshot
WriteProcessMemory
GetProcAddress
GetModuleHandleW
VirtualAllocEx
OpenProcess
GetCurrentProcessId
SetFilePointer
CreateFileA
WriteFile
GetModuleFileNameA
SizeofResource
LoadResource
FindResourceA
lstrcatA
lstrcpyA
GetCurrentProcess
CompareStringA
lstrlenA
CreateProcessA
GetSystemDirectoryA
ReadFile
GetFileAttributesA

user32

wsprintfA
GetDesktopWindow

advapi32

OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueA

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 308B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ