44f6b078f59e167a9584c54a8ab724caf8aad49ea0ddb8f07728a87e17132f9b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

44f6b078f59e167a9584c54a8ab724caf8aad49ea0ddb8f07728a87e17132f9b
Size

140KB
MD5

5bb42da1d351a8093f106fd3fda397b8
SHA1

ae77d1eb6639417cf37c130c07faf8f0dae60d05
SHA256

44f6b078f59e167a9584c54a8ab724caf8aad49ea0ddb8f07728a87e17132f9b
SHA512

1180b016bcf493e7e52a6ebe15241b6ebd8cb51903e5f21f4dcf53731d96cefdc06ebb81191f607c8ef779af1e330963be2ddecafa02ef0a0636b8ddda777b93
SSDEEP

1536:1k9hdOwqt/sIj+Tnj735fVTTcxhEgDRKaAjene9kUh/691:WtOPt/xCTnv5fBoXga1n/U/0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44f6b078f59e167a9584c54a8ab724caf8aad49ea0ddb8f07728a87e17132f9b

Files

44f6b078f59e167a9584c54a8ab724caf8aad49ea0ddb8f07728a87e17132f9b
.exe windows x86

bff89dafad8a5a42dae89107712fdb0f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE