e03a13f404520c76b86c5f6a70e337be | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e03a13f404520c76b86c5f6a70e337be
Size

52KB
MD5

e03a13f404520c76b86c5f6a70e337be
SHA1

06bf1de52976abfbcbc80c2d1c919a6b54e05465
SHA256

0b4a471c0cce0439ae02bb9647c1a92f0d59987bd993a18fada5e5d144f60852
SHA512

50b7da99b720788f2b949cedb7ec74aa15cb14676f499dccbfa3516e499d797f14a008f64c8a4495437737a7ec820c4f3329163136478ffb227e72f03376431f
SSDEEP

1536:DToGtLUd8GvwLliw6c3c0/0fafmDWqjP:DhkG+cso0fpjP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e03a13f404520c76b86c5f6a70e337be

Files

e03a13f404520c76b86c5f6a70e337be
.exe windows:5 windows x86 arch:x86

ffc40742a11c73c4d05bc7729967b5c8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey

kernel32

GetUserDefaultUILanguage

shlwapi

PathCombineW
PathFileExistsW
PathRemoveFileSpecW
SHDeleteKeyA
StrCmpNIA
StrCmpNIW
StrStrW
wnsprintfA
wvnsprintfA

user32

DispatchMessageA
DrawIcon
EndDialog
FindWindowExA
GetIconInfo
GetKeyState
LoadCursorA
OpenWindowStationA
PeekMessageA
SendMessageA

Sections

.xangx
Size: 42KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hox
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tud
Size: 6KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ