c65c8e2026bbfa4370ed34d74310582b | Triage

Sharing

General

Target

c65c8e2026bbfa4370ed34d74310582b
Size

182KB
MD5

c65c8e2026bbfa4370ed34d74310582b
SHA1

0eba7721a2319136d7404eb1fd2bbc92447f9b5e
SHA256

f4538a54d7c84731c77f1a49563840e47235533fe5d37f7f08932e240080c343
SHA512

ee4eda33c542c10fd0d49ce8705308b325d2cb8fbeead9e9c730773f85e825fd4f1404c09315abbfda08c29fb45c12b9c976681112f820c805e81889332baf7e
SSDEEP

3072:5tWtPA3Hua+1prkNk5f7k3T2fOgsPuVbA/AEg/89gWE0PI3T:5g8HkDI3qfOgsPV/AEuuEII3T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c65c8e2026bbfa4370ed34d74310582b

Files

c65c8e2026bbfa4370ed34d74310582b
.exe windows:4 windows x86 arch:x86

2fb2df85604aa00c1c760964c415acb0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CreateFileA
CloseHandle
GetCurrentProcess
ExitProcess
LCMapStringA
LoadLibraryA

user32

SetWindowLongA
CreateWindowExA
wsprintfA
CloseWindow
CharLowerBuffA

advapi32

RegDeleteKeyA
RegDeleteValueA
RegSetValueA
RegOpenKeyA
RegCloseKey
RegQueryValueA
RegCreateKeyA
RegEnumValueA
RegEnumKeyA

Sections

.text
Size: 140KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ