f44672c2abde5ea2453dfcca504fa4908fa665926012f37871300e4d9e4bece4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f44672c2abde5ea2453dfcca504fa4908fa665926012f37871300e4d9e4bece4
Size

2.8MB
MD5

9b06b495c9ab241d840c6e9ff4e09ae6
SHA1

d0e3fce19f72640e92b8a12a7c391f3a15a9c56f
SHA256

f44672c2abde5ea2453dfcca504fa4908fa665926012f37871300e4d9e4bece4
SHA512

faeafb9cbc8e51ca0a42352578e17fefa88731cf72f973f9c66a66d6b88bdc5a0f533691b0e6538ae346299b50e6bceaaf6ad0672e2508b77c8f6eb417657feb
SSDEEP

49152:3+qbIrLfxEBKLzm/B2D2N2IM8Y2Ld1R1hZSfh/sXO21CiXDgSvUcl:3+qsLqZJ2D2N2Xh2R5hZIqR/VUU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f44672c2abde5ea2453dfcca504fa4908fa665926012f37871300e4d9e4bece4

Files

f44672c2abde5ea2453dfcca504fa4908fa665926012f37871300e4d9e4bece4
.exe windows:4 windows x86 arch:x86

32c5de998b5f069b26c94c8143b13c06

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

kernel32

GetModuleFileNameW

user32

GetWindow

advapi32

RegDeleteKeyA

shell32

SHGetFolderPathW

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 776KB - Virtual size: 776KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ