c67566ee2ac2816099461242a475567c | Triage

Sharing

General

Target

c67566ee2ac2816099461242a475567c
Size

100KB
MD5

c67566ee2ac2816099461242a475567c
SHA1

83756af4bf725074ec7cd251df48f2186c42544c
SHA256

11f7082450d455089ca2786f0110c142f7537f816d9391dd5cf44387e229c032
SHA512

411b3d03f3fe0d3aed7400c4160ca6daf5ca1a97501871deec51d8cf436ab2cedd97578d7d1f628f5a531ed3f6a4b91e53a86a28cd57c76667f1943f41be580f
SSDEEP

1536:kEJ8Blpm3tXmoZBc7d9vmhplDzg0YFYK8ceHCnNmxJltS+tw/Z4Ro7:ejY3tXmoZGd9OxXy8cGumxJPSKU4C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c67566ee2ac2816099461242a475567c

Files

c67566ee2ac2816099461242a475567c
.exe windows:4 windows x86 arch:x86

ac1956bcdda8414ae3b5d5fd0c44b0f7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
IsBadReadPtr
GetCurrentProcess
DeleteFileA
GetWindowsDirectoryA
GetModuleHandleA
MultiByteToWideChar

ole32

CoUninitialize
OleSetContainedObject

user32

MessageBoxA
DefWindowProcA
CreateWindowExA
DestroyWindow
GetSystemMetrics
PostQuitMessage
LoadIconA
GetMessageA
UpdateWindow
TranslateMessage

advapi32

RegDeleteKeyA
RegCloseKey
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA

shell32

SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHGetMalloc

Sections

.text
Size: 60KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 934B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ