159ca8180eca1554cbb6a732d93a9bc174938fd52e0e5dcf35cbeaae1f61b1c6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

159ca8180eca1554cbb6a732d93a9bc174938fd52e0e5dcf35cbeaae1f61b1c6
Size

29KB
MD5

76659c1066aa3bbcdaae78ac4fd11c79
SHA1

88d8870d551e83163692f37a40e88a0a861cda67
SHA256

159ca8180eca1554cbb6a732d93a9bc174938fd52e0e5dcf35cbeaae1f61b1c6
SHA512

b709974615d2b01d967d6a5e8ef0ef94b7cea3d0a2136d4a4c85b289f1bf134e33a19abab88fbc3a4977abd2c6ed6040e8d2078e1e7c350e9c1647f6bad8c492
SSDEEP

384:iV5oYI3DL2owySV01fPYRbyR3m/AqGHJ5tPfdcZbHM/gsQETc2tttP:s5oVDL2P0KbyR3HJT9Mh78VP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
159ca8180eca1554cbb6a732d93a9bc174938fd52e0e5dcf35cbeaae1f61b1c6

Files

159ca8180eca1554cbb6a732d93a9bc174938fd52e0e5dcf35cbeaae1f61b1c6
.exe windows:5 windows x86 arch:x86

65458c0529a9d9e5316f299b60532f68

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

RtlUnwind
NtQueryInformationProcess

ole32

StgOpenStorage
CoRevokeClassObject
CoRegisterClassObject
CoUninitialize
CoInitialize

advapi32

RegOpenKeyExW
GetLengthSid

rpcrt4

RpcRaiseException
RpcEpUnregister
RpcBindingVectorFree
RpcServerUnregisterIf
RpcServerUseProtseqW
RpcServerInqBindings
RpcServerRegisterIfEx
RpcEpRegisterW
NdrServerCall2

Sections

.text
Size: 512B - Virtual size: 478B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ