eabf92049d8921c43d32f3ba0ac404912fb67c894c0e8676a387008be9d38fce | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eabf92049d8921c43d32f3ba0ac404912fb67c894c0e8676a387008be9d38fce
Size

905KB
MD5

01fb55c49c49ad4a681d011fbe98ab64
SHA1

aded7b70039ee33e9542100069a042938b22b7dc
SHA256

eabf92049d8921c43d32f3ba0ac404912fb67c894c0e8676a387008be9d38fce
SHA512

f0fd0782102b36f32999b8396c00b5e9b9cb409b067fd0529592f55b87b416e725c47cc726ff3a88a30899789c42edb24d4c94dc94c97c184d43d04946f6ac23
SSDEEP

24576:nB64mUg4HwOIsWA0uPRwdS9j1BUM+hgKT:BnWi6dSJ/UDg+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eabf92049d8921c43d32f3ba0ac404912fb67c894c0e8676a387008be9d38fce

Files

eabf92049d8921c43d32f3ba0ac404912fb67c894c0e8676a387008be9d38fce
.exe windows:4 windows x86 arch:x86

3a8897c84eb41f36b4bbabcc617408b8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

user32

GetWindow

advapi32

RegDeleteKeyA

shell32

SHGetFolderPathW

Sections

.text
Size: 64KB - Virtual size: 376KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 776KB - Virtual size: 776KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ