c80e67de73e92c3295de0a2ba307dd60 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c80e67de73e92c3295de0a2ba307dd60
Size

12KB
MD5

c80e67de73e92c3295de0a2ba307dd60
SHA1

f51ccf0576d98baa862bd4152bfc6874f1e310da
SHA256

9e3491d6f2840b6710cd6055df0e4e8b01f8a537904b99d7e96a0204786eb83d
SHA512

e92c7170becea8bcad89e9d60d7749e24639440e95ea1bb830ebc5b9c2c7ff8771a1a25f26419dcd6fa627f66e491d2d2ec93f7c3462a71266f5af732e4502b8
SSDEEP

192:acR4sczX/PTJsOmPLPgimFM7WmqiYmApGaK9ES0P80hiMa/:acRJo/LJLiYDTKGpcMy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c80e67de73e92c3295de0a2ba307dd60

Files

c80e67de73e92c3295de0a2ba307dd60
.exe windows:4 windows x86 arch:x86

e5013ca76ff13e46158aee7e880b562e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReleaseMutex
CloseHandle
GetCurrentProcessId
GetModuleHandleA
lstrcpyA
GetProcAddress
lstrcatA
ResumeThread
WideCharToMultiByte
ExitProcess
Process32First
LoadLibraryA
CreateToolhelp32Snapshot
CompareStringA
CreateEventA
RtlUnwind

user32

GetGuiResources

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 269B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE