b448453ab74c89451cfd0da58dd2664c6a65799a46a5dac588c53d4301b657ca | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b448453ab74c89451cfd0da58dd2664c6a65799a46a5dac588c53d4301b657ca
Size

2.1MB
MD5

c3f3943f6ef60aee170149d53f92fa25
SHA1

f10f8fd81caa3603dd4b2752e8890724fae320f6
SHA256

b448453ab74c89451cfd0da58dd2664c6a65799a46a5dac588c53d4301b657ca
SHA512

1b0208c6a7f16bc0646a0e42c70481d1f74205524d5acce17028088cd3cff286fc33192d5ee41c669f1de23d1a6eaa45c00d91b6d48fd0c783e9984241dfcb66
SSDEEP

49152:PsXDu2NH8GcMbJ4V6rX2PSm7g/QzqthoP9Wy2GQKV7fu6:PGuW8jM14QrG/sQutOlWy2GQKV73

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b448453ab74c89451cfd0da58dd2664c6a65799a46a5dac588c53d4301b657ca

Files

b448453ab74c89451cfd0da58dd2664c6a65799a46a5dac588c53d4301b657ca
.exe windows:4 windows x86

cd76c95a9e3911e9d77858298bceedc3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

kernel32

GetModuleFileNameW

user32

GetWindow

advapi32

RegDeleteKeyA

shell32

SHGetFolderPathW

Sections

.text
Size: 1.1MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 944KB - Virtual size: 944KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ