c75be8240602ff2814c63ed78930ba0e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c75be8240602ff2814c63ed78930ba0e
Size

1008KB
MD5

c75be8240602ff2814c63ed78930ba0e
SHA1

f2b1d8b4bd569aeb5c3b4a3f8d55d44e6c0aca04
SHA256

7d1b4796cf17fc21e2c69002ed149cbbbdd1dd091359fb86cc507da9cdb9cfe6
SHA512

3f6f8170945106fd93271f5e63ca9411755e6174a885fba9238d1fa89155eeba822349547dba7aa0bd63eefbe0402e94847db0908c4544811922684b7e0de2b6
SSDEEP

6144:ChYPwbgdnsZuts8hbDYoC6UU8WRr9NrqXtQBFXwhORVgQfbhKyUoR:gbghsIh47fU8WRr9Nr0mBFAhORvfbhnl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c75be8240602ff2814c63ed78930ba0e

Files

c75be8240602ff2814c63ed78930ba0e
.exe windows:4 windows x86 arch:x86

0d5a901bf793061912d1c773c500289a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CloseHandle
ExitProcess
GetCurrentProcess
CreateFileA
LoadLibraryA
LCMapStringA

user32

CloseWindow
CharLowerBuffA
CreateWindowExA
wsprintfA
SetWindowLongA

advapi32

RegEnumValueA
RegCreateKeyA
RegDeleteValueA
RegOpenKeyA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegCloseKey
RegSetValueA

Sections

.text
Size: 988KB - Virtual size: 988KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ