2044d654d048069b6b1fc47c77af5c30[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2044d654d048069b6b1fc47c77af5c30.exe
Size

344KB
MD5

2044d654d048069b6b1fc47c77af5c30
SHA1

161e3dfc8f7e4c225c61aa9a74b4c8b0a0229e39
SHA256

cb609a39bf9c7d7c52e28e82044c31bd6ada3fa962def8351bde9c3361296097
SHA512

fb1ad35a45aee59af4ed35fd6fde2716fe13c8e6941a3b67ca23be472eec4688990737c3202d2e4f9c7253ea5dfecce729f5dabd40c2634dee7ec90e2814b890
SSDEEP

6144:9iPC57OacQVv8CQE8C0XoYnPKLwkGlLOnYu1bWZiWDVgkR6qF6CSkPt7pfL7f/nQ:9ia56acQVlGC0RPkwkGJ81bGTP6CSKfw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2044d654d048069b6b1fc47c77af5c30.exe

Files

2044d654d048069b6b1fc47c77af5c30.exe
.exe windows x86

140094f13383e9ae168c4b35b6af3356

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
ExitProcess
GetComputerNameA
GetModuleFileNameA
GetModuleHandleW
GetProcAddress
SetErrorMode
Sleep
VirtualAllocExNuma

shlwapi

PathFindFileNameA

msvcrt

malloc
free
memset
strcmp
_strcmpi
strcpy

Sections

.text
Size: 342KB - Virtual size: 342KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 508B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ