096912f078f86d34427449b9e5c7f4b63bd697016485ec690eed9c730c7178a8 | Triage

Sharing

General

Target

096912f078f86d34427449b9e5c7f4b63bd697016485ec690eed9c730c7178a8
Size

157KB
MD5

216c2d7d60d4eac92cb9a727991cbef9
SHA1

944ace7c71f474d73389675af7d067fef5125ca2
SHA256

096912f078f86d34427449b9e5c7f4b63bd697016485ec690eed9c730c7178a8
SHA512

fe559ed9d777634cfd1adc1a713358c49d5fa6f2fe268fa3d39c26a1c0fd2c6cd262dd3da756be1de5ce49095e56d19f5772ee4a3a6d7eb6ace8c8b38d59513d
SSDEEP

3072:gPCCUV6f84P0BCK5gULdrxyaE+esM11iYHO1nw+s3J9m5YBBC+WVnB:gaZ2tKVt8aEb1tHJ+4J9EYBBi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
096912f078f86d34427449b9e5c7f4b63bd697016485ec690eed9c730c7178a8

Files

096912f078f86d34427449b9e5c7f4b63bd697016485ec690eed9c730c7178a8
.exe windows:4 windows x86 arch:x86

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 150KB - Virtual size: 150KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ