054a22927453b708e2c9214abce9184b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

054a22927453b708e2c9214abce9184b
Size

127KB
MD5

054a22927453b708e2c9214abce9184b
SHA1

9f0d01f6fc042344ebd3ab6f68293eb886adee53
SHA256

786c9877dac52f7f8071053b3edcb4a630a6440405356fd7aa72484f52fcd96d
SHA512

d4e7847fe153162b99ea13a79ad3026dbeea76c48762984755202b701415246c2831d2c9b491cd4963cc2b3f1fb44b13303ee3d6ff2080e937066c226767300c
SSDEEP

3072:BRtRXcmNGgpAHUeKRLcWIg0Ih3vcOXnZ0TnQLKx6G1G/0qIkbGfreMZ:ft1VNMUeWcWdJ9cOJ0TncnGYcP7dZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
054a22927453b708e2c9214abce9184b

Files

054a22927453b708e2c9214abce9184b
.exe windows:6 windows x86 arch:x86

e3ede9fee1180998dc41526a464330a9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
GetCurrentProcess
LocalAlloc
GetCommandLineA
GetCommandLineA
GetTickCount
SetEvent
GetTickCount
VirtualFree
FormatMessageW
GetModuleFileNameA
GetModuleHandleA
GetCommandLineA
WaitForSingleObject
GetModuleHandleA
FormatMessageW
GetCurrentProcessId
MultiByteToWideChar
MultiByteToWideChar
GetACP

user32

SendMessageW
LoadIconW
GetMessageW
SendMessageW
ReleaseDC
PostMessageW
GetDlgItem
GetMessageW
SetTimer
PostMessageW
DefWindowProcW
PostMessageW
ShowWindow
DefWindowProcW
SetTimer
DefWindowProcW
GetWindowRect
GetSystemMetrics
ShowWindow
SendMessageW
DestroyWindow
CreateWindowExW
SendMessageW
DestroyWindow
ReleaseDC

ntdll

NtAllocateVirtualMemory

Sections

.data
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.xdata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 113KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ