ded992d9ca9058db18911e0a53f0cb56 | Triage

Sharing

General

Target

ded992d9ca9058db18911e0a53f0cb56
Size

332KB
MD5

ded992d9ca9058db18911e0a53f0cb56
SHA1

5c558c2500acf53a41bbe7bf6976a2869c50d77d
SHA256

e8cbdc83e681e497c67717a8fdf6dc679c44c505174842ea2aec650e417e1d48
SHA512

a0c2752a15bb4356d919c2bff6cc6eefd0b053c82380bad49addefb8bd265904927e989f128a9dc8e7fc6c51ab30530390cfded8deb12e1a7f3315587a6ad5b2
SSDEEP

6144:DTr4xkCzfTstXDkX/9jJhkYj5GoLvFibxiHy7qmzzezXfYfg:L8kSrMkX/TOYNRibpqei7/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ded992d9ca9058db18911e0a53f0cb56

Files

ded992d9ca9058db18911e0a53f0cb56
.exe windows:4 windows x86 arch:x86

690fc7422ce0f6da501781fe38b85606

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
GetCurrentProcess
CreateFileA
CloseHandle
LCMapStringA
LoadLibraryA
ExitProcess

user32

SetWindowLongA
CreateWindowExA
CloseWindow
CharLowerBuffA
wsprintfA

advapi32

RegEnumValueA
RegQueryValueA
RegCreateKeyA
RegCloseKey
RegSetValueA
RegOpenKeyA
RegDeleteKeyA
RegEnumKeyA
RegDeleteValueA

Sections

.text
Size: 232KB - Virtual size: 232KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 84KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ