113ca04663fa63284d540f08015028c4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

113ca04663fa63284d540f08015028c4
Size

52KB
MD5

113ca04663fa63284d540f08015028c4
SHA1

019ca9b9c89c6f6c7c5f8e2e02b35e1f1eef12ab
SHA256

889af1ae3e2b5b8291ccc110867592fc139b4734d8afdc6612b8866a5db8a7d3
SHA512

c84260c191923d5c438d77f313f42751330bb735d973c3b9ab5b40f6fb59e6df746fc43e829fb3b0ad3f54794f15d530b9f30cf28389a3d1deacf68cd2cb0fff
SSDEEP

768:xLzrPIsVU080KYmz/IfhX5GaeimBYsHotogR8ARwre7zgVqMNWcRFD7DpDz:lvU080dGSh4Fb08ATzgV5Wcv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
113ca04663fa63284d540f08015028c4

Files

113ca04663fa63284d540f08015028c4
.exe windows:5 windows x86 arch:x86

77f51df9713d8759f46f198af959d5a3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

advapi32

RegOpenKeyA

Sections

.MPRESS1
Size: 42KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE