c97959062e51d4da7fcb9ef59e0daa6c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c97959062e51d4da7fcb9ef59e0daa6c
Size

180KB
MD5

c97959062e51d4da7fcb9ef59e0daa6c
SHA1

e37b4ff3ad32e2da07ad28bf65f634d9a1e01a05
SHA256

68779247f6a875a14f1b44743d2fb990e555192fdb4b65704101af387e13d8ac
SHA512

80b5f035102830b5acc255228d6f6826d449350a9a6485441a4247374ee91e8d280e7d689532ba54cbaa1cc9c77ad61c4b1cad292c4c23c08375cf0ef4e2310b
SSDEEP

3072:vduPn75ANUihN9AWkgTJdQOoVdL2gWCuOkwUSgW9CMSyjdP/Dnwy2aem+l1dY0A8:1+7InoWkgTboTLRWRSgW90yxPcNavWS8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c97959062e51d4da7fcb9ef59e0daa6c

Files

c97959062e51d4da7fcb9ef59e0daa6c
.exe windows:4 windows x86 arch:x86

fb9461eb4adac72cc14bda1cac0bd58c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
ExitProcess
LoadLibraryA
CreateFileA
GetCurrentProcess
CloseHandle
LCMapStringA

user32

wsprintfA
SetWindowLongA
CreateWindowExA
CharLowerBuffA
CloseWindow

advapi32

RegCreateKeyA
RegEnumKeyA
RegCloseKey
RegSetValueA
RegDeleteValueA
RegDeleteKeyA
RegEnumValueA
RegOpenKeyA
RegQueryValueA

Sections

.text
Size: 152KB - Virtual size: 152KB

.data
Size: 8KB - Virtual size: 5KB

.rsrc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ