96421508b732557d83b2dcbc0cf133398ce81aa0813baeea27a671127c6f642a | Triage

Sharing

General

Target

96421508b732557d83b2dcbc0cf133398ce81aa0813baeea27a671127c6f642a
Size

956KB
MD5

a055bc0407ff76b2553d9f16235455d5
SHA1

75ef7cca080aa13e0ff9d885c99a2d5f539342dd
SHA256

96421508b732557d83b2dcbc0cf133398ce81aa0813baeea27a671127c6f642a
SHA512

dd636091a85bba212ca514786fe02d6430c5b0ec231852f9e80e79b06d29a52b624836d2e7a6cd6ef53c5236336490950f0e6156e9a0e01d43e543925a281aff
SSDEEP

12288:NJ5SD92T8NamupYjX1wUNQ1SPD8QD7RQ9eUp:Hq92T8dupYz2lqDBD7RQ9eUp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
96421508b732557d83b2dcbc0cf133398ce81aa0813baeea27a671127c6f642a

Files

96421508b732557d83b2dcbc0cf133398ce81aa0813baeea27a671127c6f642a
.exe windows:4 windows x86 arch:x86

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 861KB - Virtual size: 861KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 93KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ