45b54cf8a784c2c02fc69105318d0267 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

45b54cf8a784c2c02fc69105318d0267
Size

135KB
MD5

45b54cf8a784c2c02fc69105318d0267
SHA1

1e058c93c65d1154fc2400d063cb4e1d9a680e36
SHA256

d1850a0792d1cd161327a9cdfd9785e75b77d9593e4ed31e096b2978d413090c
SHA512

5e7e89abb1286aa5b0abb48005f2708e1b754d169ca927a625661d523a7141aaf7fe84f2cbe9936ee83b2eb860bdd03d66971b2b0bc41eda61eb67e4895e36d7
SSDEEP

3072:bgaqjuv8j6h+ZnuA5ErOOzdjY1aS9UXh02gfIbij6jXx:bLiuv8j7ZuA5ErOOze1QXh0jfLwh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45b54cf8a784c2c02fc69105318d0267

Files

45b54cf8a784c2c02fc69105318d0267
.exe windows:1 windows x86 arch:x86

187553847b5ea54b105cce03f3a97423

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

iphlpapi

GetAdaptersInfo

kernel32

GetModuleHandleA
GetProcAddress
CloseHandle
RtlUnwind

user32

GetCursorInfo

crtdll

__GetMainArgs
exit
raise
signal

setupapi

SetupDiOpenDevRegKey

advapi32

RegOpenKeyExW
RegSetValueExW
RegQueryValueExW
RegCloseKey

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 40B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 120KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 844B - Virtual size: 844B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc2
Size: 300B - Virtual size: 300B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE