c427f82b380c0d37e25b614c0bfcc2da | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c427f82b380c0d37e25b614c0bfcc2da
Size

34KB
MD5

c427f82b380c0d37e25b614c0bfcc2da
SHA1

0bd714f44a50ec7ad0ce4a7c96f9f5ab4a555af6
SHA256

7a2319da1103bc4a57fbccef7273c427a3994a340ce2ea2c38f28ab315be1911
SHA512

d84ae66fb4eda5146da1dabb31a402ee1b8123bb9c6a179858486df4bdf9310217973822908beaa14e76e6155f4965c1d6d1e1b0b5c5f217740a898066ad8ead
SSDEEP

768:Gm6zNZJqdDCA6VCVf9z4MYJf6HmcoNBEKJMkda4m4Q:l6zxYCRVyR6lc4E+Tdc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c427f82b380c0d37e25b614c0bfcc2da

Files

c427f82b380c0d37e25b614c0bfcc2da
.exe windows:4 windows x86 arch:x86

e762b7c5fc1f1456a1e429ab74c7df5d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

crypt32

RegQueryValueExU

ntdll

NtCreateFile
RtlNtStatusToDosError

kernel32

HeapFree
FreeConsole
VirtualAlloc

activeds

FreeADsMem

Sections

.textbss
Size: - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 308B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

xbvnqbn
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE