c4eeb551d558966aea76f4defaf72943 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c4eeb551d558966aea76f4defaf72943
Size

216KB
MD5

c4eeb551d558966aea76f4defaf72943
SHA1

1d2c9e985a5bf6e7ee94c1ba54eccd7bec60587c
SHA256

4b79f4f6ec6765d55d6637b8f91feb2297789f3cb6cabfdfed7ca1fc56781507
SHA512

edbc4bbc8a8aafead3f67df1119f6b9ac1e21a4493c01de7bfe4f2c701de661e65046f8889192fed56ef3059dc9584d1c9e037eacd5bb7de178e9a5ca5b05228
SSDEEP

3072:KOz3P6FX83JtFEG/fHow1sr6fTH6JyZe674RFOkKhKu49UgQ6U0xZYJ:bL37/fH11sr6fTHKyZl74v4u9UsBY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c4eeb551d558966aea76f4defaf72943

Files

c4eeb551d558966aea76f4defaf72943
.exe windows:4 windows x86 arch:x86

2c47649b1d5df06bd9538714066bac67

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCreateKeyA
RegCreateKeyExA

kernel32

GetModuleHandleA
GetOEMCP
GetVersionExA
GetACP
VirtualAllocEx
lstrlenA
IsBadReadPtr
GetLastError
LoadLibraryA
GetCommandLineA
GetProcAddress
GlobalAlloc
ExitProcess
GetCommandLineW

user32

BeginPaint
CharNextW
AdjustWindowRectEx
CharLowerBuffA
CallWindowProcA
CharLowerA
CallNextHookEx
CharNextA
CharUpperBuffA
CharToOemA

Sections

CODE
Size: 180KB - Virtual size: 177KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 4KB - Virtual size: 481B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ