c876ce30b166537dd197f99b4e7f8509 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c876ce30b166537dd197f99b4e7f8509
Size

177KB
MD5

c876ce30b166537dd197f99b4e7f8509
SHA1

004bde3e69c745d6f1a10599c19bb326207ddb0e
SHA256

b9624eb599276c142d6836ea030dadbe29fcbe72bb2ec0d9811282de2a603fc7
SHA512

7843a3df6fd76865c192fae0614e6ef6449aaa4959f5eb6dda4ebc3f177a61c15e762282f0fecffb506cd9cc6d299f4218282fa3a6e52400437cc8a94b16632f
SSDEEP

3072:5kHFSO8g1+peg7FzKJWsMUMOVOmvsQXD+uv9K51Ot3bS58QJUGxNsSaA2Fb2H6S3:sFb8gcplpz1sMUZVLDXD+uvo5CLmRZxN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c876ce30b166537dd197f99b4e7f8509

Files

c876ce30b166537dd197f99b4e7f8509
.exe windows:4 windows x86 arch:x86

bac8e2236bdfec74ee33448129f2956b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
lstrlenW
GetProcAddress
FindResourceA
GetModuleHandleA
GlobalAlloc
GetACP
LoadLibraryA
GetModuleFileNameA
SetLastError
WaitForSingleObject
GetLastError
GetModuleHandleW
GetCommandLineW
ExitThread
ExitProcess
IsBadReadPtr
GetCommandLineA

shlwapi

SHQueryInfoKeyA
SHSetValueA
PathIsDirectoryA
SHStrDupA
SHGetValueA
SHQueryValueExA
SHDeleteKeyA
PathGetCharTypeA
PathIsContentTypeA
SHDeleteValueA

version

VerQueryValueA
VerInstallFileA

Sections

CODE
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ