04cf987873b4e463bbd9a1fa0637b8c40f02fea0b9f5f86f50d66cdc3128d9adN | Triage

Sharing

General

Target

04cf987873b4e463bbd9a1fa0637b8c40f02fea0b9f5f86f50d66cdc3128d9adN
Size

1.4MB
MD5

2346b06e3831f0da33b78c0cddc74b80
SHA1

43062b7cdf35207f2913e5d8e67b97cd8596c006
SHA256

04cf987873b4e463bbd9a1fa0637b8c40f02fea0b9f5f86f50d66cdc3128d9ad
SHA512

9eb343198c156203ca5f89c7acf37962a16719157cdb8061b85068808dc28d338bcd5048fbe04ed27fef41cd70b5dd6ad946683a83b31a2cbc323e4eafb82d5f
SSDEEP

384:PJG14lR/NpKAN+UJfo8vJh/7neuwyv3ZUKcreuDreuwyv3ZUKcreuDz:RFtFe8vJtDeunUreufeunUreuf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04cf987873b4e463bbd9a1fa0637b8c40f02fea0b9f5f86f50d66cdc3128d9adN

Files

04cf987873b4e463bbd9a1fa0637b8c40f02fea0b9f5f86f50d66cdc3128d9adN
.exe windows:4 windows x86 arch:x86

c714cc45299e14ccc149ee1227222831

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegCreateKeyExA
RegDeleteValueA
RegSetValueExA

kernel32

ExitProcess
GetModuleFileNameA
GetSystemDirectoryA
SetUnhandledExceptionFilter
Sleep

msvcrt

_strupr
_cexit
_errno
_fileno
_findclose
_findfirst
_findnext
_fmode
_fpreset
_iob
_setmode
_stat
__getmainargs
atexit
exit
fclose
fgetc
fopen
fputc
free
__p__environ
malloc
memset
remove
signal
strcat
strcpy
strncat
strstr
system
time
__set_app_type

user32

MessageBoxA

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ