a5d13b4ee8f2805064db26497b53ea7f187f50f47fc2121e408c99328c2b7babN | Triage

Sharing

General

Target

a5d13b4ee8f2805064db26497b53ea7f187f50f47fc2121e408c99328c2b7babN
Size

201KB
MD5

0dd368c8088ba2baf52bb8f42088eb60
SHA1

89477a7580478b32328f9a5a10e39e19837e69c6
SHA256

a5d13b4ee8f2805064db26497b53ea7f187f50f47fc2121e408c99328c2b7bab
SHA512

c8a06f7f402dbd078ec46959492ab7be468e2a7f0125239c34915d52e9de17b9e01f72796666ffb2883a4689f9ead2680684402bb9da76cb24f048debd9e9de4
SSDEEP

3072:Z6x8dWIxPco59TFr+IsCVHRZRyf7ro/H7Bd2:gqFLsCVxZRyf7r6Bd2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a5d13b4ee8f2805064db26497b53ea7f187f50f47fc2121e408c99328c2b7babN

Files

a5d13b4ee8f2805064db26497b53ea7f187f50f47fc2121e408c99328c2b7babN
.exe windows:4 windows x86 arch:x86

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 172KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ