160a6d0b9f616e36142f6e63b0c465fd19df1dbcbc79bbf44c9e41d3cd547c12[.]exe | Triage

Sharing

General

Target

160a6d0b9f616e36142f6e63b0c465fd19df1dbcbc79bbf44c9e41d3cd547c12.exe
Size

885KB
MD5

2b541d5afc616ad7f22b33f454701401
SHA1

ab38bb5e1c8384b801e26aeb522c489f3afed030
SHA256

160a6d0b9f616e36142f6e63b0c465fd19df1dbcbc79bbf44c9e41d3cd547c12
SHA512

5a6356ca7af9663e5db64ff707389d120b41f938e4464aa0f4200b3f2b863f58d6bc9c2b8444e3db6b0864eecec3dc71a64800873f4150509538ec33442efe02
SSDEEP

24576:IgOCK33kZnEvq3Rh4P1998MmYEaucKwlyHn8M1Hj:dOhnmZWU/wOLHj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
160a6d0b9f616e36142f6e63b0c465fd19df1dbcbc79bbf44c9e41d3cd547c12.exe

Files

160a6d0b9f616e36142f6e63b0c465fd19df1dbcbc79bbf44c9e41d3cd547c12.exe
.exe windows:5 windows x86 arch:x86

117351fff74356c2da862d034ee0aa69

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
CloseHandle
GetCurrentProcess
HeapCreate
HeapDestroy

user32

wsprintfA
CharLowerBuffA
CloseWindow
SetWindowLongA

advapi32

RegDeleteKeyA
RegEnumKeyA
RegCreateKeyA
RegDeleteValueA

ole32

CoInitialize
CoGetClassObject
OleRun
CoInitializeEx

Sections

.text
Size: 34KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 776KB - Virtual size: 775KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE