57e8822cb11b69d558ce53de0d7de4ee | Triage

Sharing

General

Target

57e8822cb11b69d558ce53de0d7de4ee
Size

256KB
MD5

57e8822cb11b69d558ce53de0d7de4ee
SHA1

a995c22c87e8a227e09becdd07094d026ca0a207
SHA256

8c2c855b1c9ce1eae94ea7747ab5897b1e8c416ccf5c27caa9b185a9f71f08f3
SHA512

e22dc3a1be7326f76aba3aa53f3a1d0e1079fa61256eeb16742de1a69fe7f7a59cf69d9266c31f6ab04b9c082302ed284a83dcd88a55ff9774e83b50b70b0508
SSDEEP

6144:2dMvtUR3WpmJbWO3Wp6LBCYdi3WpmJbWO3Wp:2dMvttC4sBVC4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
57e8822cb11b69d558ce53de0d7de4ee

Files

57e8822cb11b69d558ce53de0d7de4ee
.exe windows:1 windows x86 arch:x86

9c0050334da711b5147027326c52827d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetFileSize
GetModuleHandleA
CloseHandle
GetTickCount
GetWindowsDirectoryA
CopyFileA
LocalAlloc
LocalFree
CreateFileA
ReadFile
RtlUnwind
WinExec
WriteFile
DeleteFileA

user32

MessageBoxA

advapi32

RegCloseKey
RegOpenKeyA
RegSetValueExA

crtdll

__GetMainArgs
exit
memcpy
memset
printf
raise
signal
strcat
strchr
strlen
strncpy

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 1024B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ieoo
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ