a93387592db3ed6694464fab8b248e86c9252e4a592b0c72c061c8412c65d714 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a93387592db3ed6694464fab8b248e86c9252e4a592b0c72c061c8412c65d714
Size

852KB
MD5

ff5ca32400b3ed51c47f0217360a7855
SHA1

77e8cedd2564b09e61d26f73b18821e9c23278c6
SHA256

a93387592db3ed6694464fab8b248e86c9252e4a592b0c72c061c8412c65d714
SHA512

35bbb98fe8aa24609294b3e23a63618d9e5a310bbc5f97e5b575aba249b0e09a3e83ebb5419ef3d8ff0e814a82829a799e82a2bd03ed7e67c29b3fe66ca600c6
SSDEEP

12288:tEl3jGBI+qLNsEFzASI8TcdE6W/kaGZ13W2XUGaFm3jIZnBZBPHk7ZgYklmGkW:tkjGELNfa8MEncaGKLm3UZnvIzKkW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a93387592db3ed6694464fab8b248e86c9252e4a592b0c72c061c8412c65d714

Files

a93387592db3ed6694464fab8b248e86c9252e4a592b0c72c061c8412c65d714
.exe windows:4 windows x86 arch:x86

6d1830ae93d0beedb2b3d5b8c48572ad

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

user32

GetWindow

advapi32

RegDeleteKeyA

shell32

SHGetFolderPathW

Sections

.text
Size: 72KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 764KB - Virtual size: 764KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ