a30d64b062353f57aced1633ec7f8a4ee37c6c20d413e08747b1c8c11fc61ce3 | Triage

Sharing

General

Target

a30d64b062353f57aced1633ec7f8a4ee37c6c20d413e08747b1c8c11fc61ce3
Size

144KB
MD5

c170cacd3d5c896a7687de9a06d16fb2
SHA1

d59e1c06d51f194460fd2a233de5ce36a748e003
SHA256

a30d64b062353f57aced1633ec7f8a4ee37c6c20d413e08747b1c8c11fc61ce3
SHA512

b1c9491d231337af69cb0f16b452b794a626ae609e3e6214a76b7dcd1535598c4432dd4caa8e5d68c9715c861afc387a800df8a38e6f454055cfe33c144c1232
SSDEEP

3072:QCFHNpwUpKh0bLx0wP0f+I8/XQvZL5F9EEBme/uc2yPy/61s9jKUwP5sSj:zFt/vxKWJXQl9EEBxmgqIsVKUwKSj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a30d64b062353f57aced1633ec7f8a4ee37c6c20d413e08747b1c8c11fc61ce3

Files

a30d64b062353f57aced1633ec7f8a4ee37c6c20d413e08747b1c8c11fc61ce3
.exe windows:1 windows x86 arch:x86

49d7ad15ecf8f564819a26815954d58d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

iphlpapi

GetAdaptersInfo

kernel32

GetModuleHandleA
GetProcAddress
CloseHandle
RtlUnwind
GetModuleHandleW
CreateFileW
WideCharToMultiByte
LoadLibraryW

user32

GetCursorInfo

crtdll

__GetMainArgs
exit
raise
signal

advapi32

IsTextUnicode
RegOpenKeyExW
RegSetValueExW
RegQueryValueExW

ulib

?Initialize@ARRAY@@QAEEKK@Z

ntdll

RtlFreeHeap

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 40B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 129KB - Virtual size: 129KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc2
Size: 135B - Virtual size: 135B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE