c718156e73dae1aabdbb0d9c38f0a50e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c718156e73dae1aabdbb0d9c38f0a50e
Size

46KB
MD5

c718156e73dae1aabdbb0d9c38f0a50e
SHA1

c3a72eabfbcf6e54c29b96d3ab1966948fede8b7
SHA256

99784c295a7e5ee708df233805a59556fb23a9ae187a98724192dad28d67395f
SHA512

b9d0e3ed87d469a74f9949c0b8798ce35e8a8407ba3ac54bfad7517ec27572de7a0151a6585a70e920d8f8008de76ed342e44240bec3444bf32fbd6dc0f1a92f
SSDEEP

768:2/gWJjuFELfeBGlJHjgKPmjeRLBe9oPcHTBU7mkqWz/G/r+HAuF6G2DkY:qxJjuXBG3MOEyYmEBOqWziaAu6vAY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c718156e73dae1aabdbb0d9c38f0a50e

Files

c718156e73dae1aabdbb0d9c38f0a50e
.exe windows:5 windows x86 arch:x86

dc8ebdac6fc560b67c411532e45fd43c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

CryptReleaseContext
CryptCreateHash
CryptGetHashParam
RegQueryValueExA
DuplicateTokenEx
RegCloseKey
RegDeleteValueA

shlwapi

wnsprintfA
StrCmpNIW
wvnsprintfW
StrStrW
PathFileExistsW
PathRemoveFileSpecW
wvnsprintfA
StrCmpNIA
PathFindFileNameW
PathMatchSpecW
SHDeleteKeyA
wnsprintfW
PathCombineW

Sections

.lwbsd
Size: 36KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.zsfqp
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ctun
Size: 5KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ