e04896c65ee3154dd529891ab15a61bd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e04896c65ee3154dd529891ab15a61bd
Size

307KB
MD5

e04896c65ee3154dd529891ab15a61bd
SHA1

a14d63ecdfe5d48fc82ae5616fac98f82c4cb002
SHA256

18c658f99976f8e9fcaedc63bca0eaa9a0ea22322db277e71f3bf3accb22d0ce
SHA512

ec9e3a47bc450a1bcd1b7c8179b01e18e570ca97b4c524e43f4ed2d45846b65b70c37379e00c39023e3d6fc7e99a3ca9f30994aa3362e69fcb2eef5e66ce261c
SSDEEP

6144:lnVFLrCQNcFoENX802k3hv+1yMmb9JdkVVkUytav/XPidHDuezA2:lnV5rCQ2RNsGhcOb9JdSVfyi/XPvn2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e04896c65ee3154dd529891ab15a61bd

Files

e04896c65ee3154dd529891ab15a61bd
.exe windows:4 windows x86 arch:x86

5c4c0ff6e798cbe96f2df78189fb303c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReleaseMutex
LocalFree
GetComputerNameW
HeapCreate
CreateFileA
GetDriveTypeA
LoadLibraryA
GetProcessHeap
GetCommandLineW
GetTickCount
GetDiskFreeSpaceW
SetEvent
CloseHandle
LoadLibraryW
lstrcpynA
ExitThread
GetLocalTime
FindAtomA
GetFileAttributesW
ReleaseMutex

user32

DrawStateA
GetComboBoxInfo
CloseWindow
GetClipCursor
GetKeyState
DispatchMessageA
FillRect
DestroyCaret
CreateWindowExA
CallWindowProcA
GetDlgItem
GetClassInfoA
SetFocus

snmpapi

SnmpTfxClose
SnmpTfxOpen
SnmpUtilMemAlloc
SnmpUtilMemFree
SnmpTfxQuery

appwiz.cpl

ConfigStartMenu

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 348KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 295KB - Virtual size: 294KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ