c92f32c5ea94f91487909e60477605f2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c92f32c5ea94f91487909e60477605f2
Size

46KB
MD5

c92f32c5ea94f91487909e60477605f2
SHA1

39400d330ea28dfe4ecca7f946ad7970e4b92cee
SHA256

fbbc42de80a7ae8eca2538209eeee1e9e070ff1efa01c86d414bfce52351de4f
SHA512

571c9dafb6adfb3f357ebe7e345967eb05ea0855e9cd6e45aae24890fa92729e0d3dd833d69693f242d63cfd066375c60a44c4d83333ff446276ed53fde37660
SSDEEP

768:GB0CvgrfKwP1KOHI6zBy+CT7KRdhfoDbcSUJ8JWRMHWtrGju+c2G3AopC1q/StB:GB7orfKwP1861y+CT7KRnfoDbc98J01S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c92f32c5ea94f91487909e60477605f2

Files

c92f32c5ea94f91487909e60477605f2
.exe windows:5 windows x86 arch:x86

103fd1b2ce621dec05231d32c927e310

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegQueryValueExA
RegCloseKey
CryptGetHashParam
CryptCreateHash
DuplicateTokenEx
RegDeleteValueA
CryptReleaseContext
GetUserNameW

shlwapi

PathFileExistsW
wvnsprintfW
SHDeleteKeyA
StrCmpNIW
PathMatchSpecW
StrStrW
PathRemoveFileSpecW
wvnsprintfA
wnsprintfA
StrCmpNIA
PathFindFileNameW
PathCombineW

Sections

.ijun
Size: 37KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bqbkp
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mdkx
Size: 5KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ