c592dc645080bd2e82c4bbdb33558896 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c592dc645080bd2e82c4bbdb33558896
Size

164KB
MD5

c592dc645080bd2e82c4bbdb33558896
SHA1

240a84584bf62a1150c999fd0ff3c963d3c9725d
SHA256

38156da515c1df7bdcd5e3372cd946385ec34782f89ba84ada1230ec561309b6
SHA512

7e9bf0c57a55a244a89781ed0cdd0b2a224e65ec99e83668cb2ab0fdf8002c3ff6cf54af41e68b4547feb4e9b777364a7d8b4ae6543c77d1afd917523c946193
SSDEEP

3072:F8cGZ2Pnfp/oeQRhyjs8C6gAERV4fwaoNRdsO8KSDvkHMlwvJVJja1Tt:2cu2Pnx/oeYyji6gAW4od8WHM4Tja3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c592dc645080bd2e82c4bbdb33558896

Files

c592dc645080bd2e82c4bbdb33558896
.exe windows:4 windows x86 arch:x86

6935bdb4d9052de6be8d17c787741103

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
GetCurrentProcess
LCMapStringA
CloseHandle
LoadLibraryA
CreateFileA
ExitProcess

user32

CreateWindowExA
CloseWindow
CharLowerBuffA
SetWindowLongA
wsprintfA

advapi32

RegDeleteKeyA
RegQueryValueA
RegCloseKey
RegEnumKeyA
RegOpenKeyA
RegSetValueA
RegDeleteValueA
RegEnumValueA
RegCreateKeyA

Sections

.text
Size: 145KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ