4756749f0cf42f92555df405f01a2ab92347c6819b8f34f64792ea38c646fce6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4756749f0cf42f92555df405f01a2ab92347c6819b8f34f64792ea38c646fce6
Size

96KB
MD5

ce50082e633a80ea1a37cce90eee36a3
SHA1

cacf32c9601169e2fddbda6ea75b9611becbd214
SHA256

4756749f0cf42f92555df405f01a2ab92347c6819b8f34f64792ea38c646fce6
SHA512

99773a03689347c30262124aa21137af2393d422152fadd071ebda5b64274f7ed531e27386e40edd6e625b7cec245058e2b6ae52039220cd4781a52faa8b3e03
SSDEEP

1536:3JzDfTxk1mvECgzLidyrYoDzpMBexMTfVpsYY/UrllrMeoX/jnighobcfeQDn:3JzhkQBgzLeyrnCHpXhTGLnih2eQDn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4756749f0cf42f92555df405f01a2ab92347c6819b8f34f64792ea38c646fce6

Files

4756749f0cf42f92555df405f01a2ab92347c6819b8f34f64792ea38c646fce6
.exe windows:4 windows x86 arch:x86

b928bac1950f1a0876c192e3398a3f4f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
DeleteFileA
MoveFileExA
GetStartupInfoA
GetModuleHandleA
RemoveDirectoryA

user32

MessageBoxA

advapi32

RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegDeleteKeyExA

msvcrt

strrchr
time
_exit
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_XcptFilter

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 826B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE