dea21fa9ade7fc6b7ed702e854d6e7bf0184ba884456e4732cbb5fbaff6d7075 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dea21fa9ade7fc6b7ed702e854d6e7bf0184ba884456e4732cbb5fbaff6d7075
Size

63KB
MD5

34d5dc4a075cb1a2374a040d80a0eaa1
SHA1

610b2e3f3b03b91eecbc45da677c6d3bb49774e7
SHA256

dea21fa9ade7fc6b7ed702e854d6e7bf0184ba884456e4732cbb5fbaff6d7075
SHA512

77056e6d5694033272ba618632628325f11598dd3e1abbe628cd10a2d2c5131718d739a4853ec917c1f6008efda12af65a9f85cd71c24d50183332a32baecad4
SSDEEP

1536:ulWu0QqFTKerVmjdFnNiaUSyfnAX/MlumBKjgRAv:G0QqMsmXNPWPQEumBkEAv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dea21fa9ade7fc6b7ed702e854d6e7bf0184ba884456e4732cbb5fbaff6d7075

Files

dea21fa9ade7fc6b7ed702e854d6e7bf0184ba884456e4732cbb5fbaff6d7075
.exe windows:4 windows x86 arch:x86

52156212e07393898606345018bb7898

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetComputerNameEx2W
DebugBreak
RegCreateKeyExA
RegRestoreKeyA
BaseUpdateAppcompatCache
InitAtomTable
ActivateActCtxWorker
FindPackagesByPackageFamily
ReadConsoleOutputCharacterW
Basep8BitStringToDynamicUnicodeString

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE