e49ab2a65d61be80ede3c011590ff84d7e274455ace08f11c22596a733fbead9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e49ab2a65d61be80ede3c011590ff84d7e274455ace08f11c22596a733fbead9
Size

145KB
MD5

8eb7afd0b2e4042a4aee2ca6250b0ac0
SHA1

dd77cac9a52815b8a892d73657d5eda960851d12
SHA256

e49ab2a65d61be80ede3c011590ff84d7e274455ace08f11c22596a733fbead9
SHA512

9ad4ae69dc03719a6d0325476999a7f2d25c180b3a52f21df7611c91ccb65995de63913bfa75c164806ab193ea55f0be3f709187f327a982d75dd3af35c78cf7
SSDEEP

768:hcEEC+ggq/EnxkCbRg5ijoUODOKgBeOOODXq+quevMtuJT7TOOOsLOOOZ2IObKPx:gkmoOxBjX3quoPVLIeWPsHM74AEcEsZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e49ab2a65d61be80ede3c011590ff84d7e274455ace08f11c22596a733fbead9

Files

e49ab2a65d61be80ede3c011590ff84d7e274455ace08f11c22596a733fbead9
.exe windows:4 windows x86 arch:x86

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 139KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ