45dd31dca01f129c46840cc99a9b3db3cd610c4d801cbe81994a1f72c388c084 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

45dd31dca01f129c46840cc99a9b3db3cd610c4d801cbe81994a1f72c388c084
Size

3.1MB
MD5

4491c009cf2a30e018702aefbe47f27d
SHA1

2c8efbb7ea6d3cd10f22a878e848311644ee59ca
SHA256

45dd31dca01f129c46840cc99a9b3db3cd610c4d801cbe81994a1f72c388c084
SHA512

4e97bd8b43c4049426cfe34d2dd25800d67de82a4cd131a50391e32eabe1a7ad55adc3d92aeab1915dfb24ebb8ab86c7d2ae99cbf132b8cb3d2e5e5a7d4bbc6a
SSDEEP

49152:9NrYtbAbbc0CGVHCcOxqoppLXCIYrKMtlBdukXK6f/8LYFlNKVZxMsb:9rbc0dxOfbCIYflBduQn8/1b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45dd31dca01f129c46840cc99a9b3db3cd610c4d801cbe81994a1f72c388c084

Files

45dd31dca01f129c46840cc99a9b3db3cd610c4d801cbe81994a1f72c388c084
.exe windows:5 windows x86

f427ec01d51b9c584dcb332a494f35bf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

gdi32

UnrealizeObject

version

VerQueryValueW

mpr

WNetGetConnectionA

ole32

CreateStreamOnHGlobal

comctl32

_TrackMouseEvent

shell32

ShellExecuteA

comdlg32

GetOpenFileNameA

wsock32

WSACleanup

gdiplus

GdipSetStringFormatLineAlign

Sections

.text
Size: 2.7MB - Virtual size: 6.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE