57ebdd09f949695a5c014e4a9b60200d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

57ebdd09f949695a5c014e4a9b60200d
Size

201KB
MD5

57ebdd09f949695a5c014e4a9b60200d
SHA1

930fbcd8d46a5e031b6a43a123683576967c8326
SHA256

e0b67ca91f2b47cf7353d006f6b98ca3dabcd931798924fefe4f28d22aef71be
SHA512

2e8c3925eb849c3e3e696fe47abe0e97fa5553c360f95fda4b3f77fd8078841b2a4f3ad2670d23efc04c0b4ac5a923afc7fa0983c3b3a41db753c2fdbe7792d3
SSDEEP

3072:PPmd2i+9Q/SoQ2kALcj+1ykxvBp4tNLNl1I0wHJamgsCRA/DFH2pothLKg88iE:rTQS3ZGcj8xvINhl1+HeAbFZhGg3iE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
57ebdd09f949695a5c014e4a9b60200d

Files

57ebdd09f949695a5c014e4a9b60200d
.exe windows:4 windows x86 arch:x86

d4ff4e9520d2b9d618be12fecec0c0ac

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatA
LoadResource
SizeofResource
FindResourceA
CloseHandle
WriteFile
CreateFileA
GetTempFileNameA
DeleteFileA
Sleep
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetStartupInfoA
LockResource
lstrcpyA
GetCommandLineA
FreeLibrary
GetProcAddress
LoadLibraryA
GetWindowsDirectoryA
GetModuleFileNameA

lz32

LZCopy
LZOpenFileA
LZClose

user32

MessageBoxA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 198KB - Virtual size: 198KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ