a916b5cd700d7f69346d318492ce53a2a61b0e25c5398a5db6a7bf944cc76acf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a916b5cd700d7f69346d318492ce53a2a61b0e25c5398a5db6a7bf944cc76acf
Size

786KB
MD5

4e052f43f71651c1d987592d778689b7
SHA1

dd00a18c5765bff02c61b8734d602d5801cd9b1e
SHA256

a916b5cd700d7f69346d318492ce53a2a61b0e25c5398a5db6a7bf944cc76acf
SHA512

d430e405a43ca9491446426fbf42b6c987e3339354b39c1776f1cdb2dc1669ea9fba40eeae8e41182787d5fa028f4ccaf42af80884a91ae30adfd0e8e2c92193
SSDEEP

24576:7OthUKdnUzyelhgp0QHQGzbCQurU10Z9FRuI9a:CthdUzyelWyQHQGzbCQ8U1MFRA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a916b5cd700d7f69346d318492ce53a2a61b0e25c5398a5db6a7bf944cc76acf

Files

a916b5cd700d7f69346d318492ce53a2a61b0e25c5398a5db6a7bf944cc76acf
.exe windows:4 windows x86 arch:x86

32c5de998b5f069b26c94c8143b13c06

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE

Imports

mscoree

_CorExeMain

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

kernel32

GetModuleFileNameW

user32

GetWindow

advapi32

RegDeleteKeyA

shell32

SHGetFolderPathW

Sections

.text
Size: 33KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 742KB - Virtual size: 744KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ