154edecd938caf5bb49875259fec44aa | Triage

Sharing

Copy URL Twitter E-mail

General

Target

154edecd938caf5bb49875259fec44aa
Size

21KB
MD5

154edecd938caf5bb49875259fec44aa
SHA1

f8545dedf30e6de70667be1f5d0098c1adbd77a8
SHA256

3ac9a27785b592d2d33767563500c6b7f622e34f8e33b8744c840b46dc7d56d6
SHA512

13ee1cdbdfe6ee4d3af2c0c3653197f8d5766bf35a3b5d08ff2d2e6f2cec8bc8d91cda0e9402d4815dbd7959c914c2e77c572a551f166b0fb7d1dea621a29cb8
SSDEEP

192:8a0iwiuSrP1oynxTjhjrkkONjAwJMMwpBE:zpuSz1T5jejCpC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
154edecd938caf5bb49875259fec44aa

Files

154edecd938caf5bb49875259fec44aa
.exe windows:4 windows x86 arch:x86

5d0420fe2bb11ede4028957752ab7991

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalAlloc
GetModuleFileNameA
CloseHandle
ReadFile
SetFilePointer
CreateFileA
lstrcpyA
lstrlenA
MultiByteToWideChar
GetUserDefaultLCID
GetStartupInfoA
GetModuleHandleA

user32

MessageBoxA
wsprintfA

msvcrt

_acmdln
free
malloc
strlen
strcpy
_exit
_XcptFilter
exit
_controlfp
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3

oleaut32

SysAllocString

ole32

OleInitialize
CLSIDFromProgID
CoCreateInstance

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 844B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ