546fbde6be4b94c011b2636fd7bd77d98b8b6b3e01298d10d5a007469c5e1d4c | Triage

Sharing

General

Target

546fbde6be4b94c011b2636fd7bd77d98b8b6b3e01298d10d5a007469c5e1d4c
Size

19KB
MD5

b066b069bc6db0b430c4aad6d873cf65
SHA1

da68fc9a9a688f0530e441964aee5b957636f3b9
SHA256

546fbde6be4b94c011b2636fd7bd77d98b8b6b3e01298d10d5a007469c5e1d4c
SHA512

3900e7447b6b3d862b0bf558c20ae343b73dcab62fde52113a515297b6c374acbb617655294439db56773a2a2449c2e2c0ed84adf867b05ab660f33053d191ea
SSDEEP

192:TZGsQlXGdDWKDfaxXgvDqekL0YyG94wt30A8ju5zTTDS6:TZGsQlXeWKDUGLo9r9KA8yZTO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
546fbde6be4b94c011b2636fd7bd77d98b8b6b3e01298d10d5a007469c5e1d4c

Files

546fbde6be4b94c011b2636fd7bd77d98b8b6b3e01298d10d5a007469c5e1d4c
.exe windows:4 windows x86 arch:x86

76da657d8c509c4f7a1e23a1e7ac2391

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetStartupInfoA

user32

GetKeyboardState
keybd_event

msvcrt

_XcptFilter
_cexit
exit
_acmdln
__getmainargs
_exit
_c_exit
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
memset
??2@YAPAXI@Z
strlen
??3@YAXPAX@Z
__setusermatherr
_initterm
_stricmp

setupapi

SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsA
SetupDiGetDeviceRegistryPropertyA
SetupDiEnumDeviceInfo

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 92B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE