ee5803720c3356bab714e3925934d0dbb5b6688aa10ccc087912dcf9e4d49a9a | Triage

Sharing

General

Target

ee5803720c3356bab714e3925934d0dbb5b6688aa10ccc087912dcf9e4d49a9a
Size

16KB
MD5

680333bfcdf30acb136938e736163cb6
SHA1

4bfe414d2c270ee82b3aa1033b90579873680369
SHA256

ee5803720c3356bab714e3925934d0dbb5b6688aa10ccc087912dcf9e4d49a9a
SHA512

0f99ab97d35e04a32b0d513d6a86f28009448deaf71b970aeb91408fb2da96199e3b288b87864fbd77968fd1ddd21b1dc015c9ee952bcca7e1677194a4aab688
SSDEEP

192:eU18wnYKmSCdIaSMgQ37qS+iyqX8ZSvrO/RCVaqYgOqCklvmUNlv:rSwnrxCd/7x+QzuGLYHkRmUb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ee5803720c3356bab714e3925934d0dbb5b6688aa10ccc087912dcf9e4d49a9a

Files

ee5803720c3356bab714e3925934d0dbb5b6688aa10ccc087912dcf9e4d49a9a
.exe windows:4 windows x86 arch:x86

7eafa2afc7e0292a67d9aa85ef7b435c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapFree
IsBadReadPtr
CloseHandle
ReadFile
GetFileSize
HeapAlloc
MoveFileA
WriteFile
FreeLibrary
GetProcAddress
LoadLibraryA
ExitProcess
GetModuleHandleA
CreateFileA
GetProcessHeap

user32

MessageBoxA
wsprintfA

msvcrt

strrchr
??2@YAPAXI@Z
strchr
atoi
??3@YAXPAX@Z

advapi32

RegQueryValueExA
RegOpenKeyA
RegCloseKey

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 736B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 511B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE