c554b2de2a89a96fd3ff7de21c286aaa | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c554b2de2a89a96fd3ff7de21c286aaa
Size

46KB
MD5

c554b2de2a89a96fd3ff7de21c286aaa
SHA1

657a98222b03b033006baf5c2a38c24e8cc7f7aa
SHA256

7f8af98cf17dc8b7265ab46374ad5727fb48f191a6b638adc72f687e123f2221
SHA512

2eae4bd9009afa954394e690545020993c3fedc2500608be743cd70007cd02347f8299926be27c323c5e249cab3d582ce999fefb138a0ad483c2888c00425a7b
SSDEEP

768:sMeG/E5FqLhZ3w0R4//c6nXaLwnZHpgYAfsFpd+8Va9nZVH:s5b5QVFw0S//dqkJgYlpd+9lH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c554b2de2a89a96fd3ff7de21c286aaa

Files

c554b2de2a89a96fd3ff7de21c286aaa
.exe windows:5 windows x86 arch:x86

bb7b4ed557f21cb1697ab5120d8951ef

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegQueryValueExA
CryptReleaseContext
RegCloseKey
CryptCreateHash
RegDeleteValueA
CryptGetHashParam
DuplicateTokenEx

shlwapi

SHDeleteKeyA
StrCmpNIW
wvnsprintfA
PathCombineW
wnsprintfW
StrCmpNIA
PathMatchSpecW
StrStrW
PathRemoveFileSpecW
PathFindFileNameW
wnsprintfA
PathFileExistsW
wvnsprintfW

Sections

.ylgj
Size: 36KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ereh
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.uditcr
Size: 5KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ