57b1a9079263a4bfa9029ef9afa26666 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

57b1a9079263a4bfa9029ef9afa26666
Size

184KB
MD5

57b1a9079263a4bfa9029ef9afa26666
SHA1

d67805c94344bcc94110255fa48e855173334d2d
SHA256

c3c0031ab9bc2838838d441bbf936a0a74e20b191dcced1e710c113fd751f5c0
SHA512

8c7279f81bccb7e25bcda12bdb96d880af3219610708d42d04cead3f892e9bb30ac77b782a3a8da0430fd43a222856a36da5917165389ad2536e81ad6a18b803
SSDEEP

3072:O65lr3F1/kbJqenROK8dqFCpXR22zSqsGKs08WhYrIdUUzYaoiFS/wwyCNG4kgzz:Owr1defAdqKXRxSs09YgPoiFSpsozz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
57b1a9079263a4bfa9029ef9afa26666

Files

57b1a9079263a4bfa9029ef9afa26666
.exe windows:1 windows x86 arch:x86

faf6966176d620fef39250aa95db75fd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CopyFileA
CreateFileA
CreateFileMappingA
GetCommandLineA
GetDriveTypeA
GetTickCount
MapViewOfFile
SetErrorMode
Sleep
UnmapViewOfFile
VirtualAlloc

advapi32

RegCloseKey
RegCreateKeyExA
RegSetValueExA

Sections

.data
Size: 512B - Virtual size: 198B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 179KB - Virtual size: 179KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE