1845abc9db6b951ce5e9097b711a95df121903ad7566c4a62e6a30a12d6da866 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1845abc9db6b951ce5e9097b711a95df121903ad7566c4a62e6a30a12d6da866
Size

19KB
MD5

79df968210a9ac785feb3c021dbd40bb
SHA1

1903009015b1436c2daba3e2b4c9afbbb3172624
SHA256

1845abc9db6b951ce5e9097b711a95df121903ad7566c4a62e6a30a12d6da866
SHA512

1c214b204415d0f73512c0e1938949457053b1139a8360ea93aaf75ae0f1fc78f923de4bbeb328a6c136212307ef49fa6943681d3a3a6d0b3eb758313558a3e4
SSDEEP

192:QiYx0W7Pq7ev30KwbwHVQOYksrm8i2FKaduCzyrey5jqrL30KWvy45U45:Qie0EqqsKowHSOlss2YAzyrecJKWvPT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1845abc9db6b951ce5e9097b711a95df121903ad7566c4a62e6a30a12d6da866

Files

1845abc9db6b951ce5e9097b711a95df121903ad7566c4a62e6a30a12d6da866
.exe windows:4 windows x86 arch:x86

19cf9ae34d4e4491e09f4c18a603660a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

FindResourceA
GetModuleHandleA
LoadResource
MoveFileA
SetEnvironmentVariableA
SizeofResource
lstrcatA
ExpandEnvironmentStringsA
lstrcpyA
lstrlenA
FindClose
FindFirstFileA
CloseHandle
CreateFileA
FlushFileBuffers
WriteFile
ExitProcess
lstrcmpiA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 684B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ