44454d46526f4f986d40edfbbc62de9b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

44454d46526f4f986d40edfbbc62de9b
Size

124KB
MD5

44454d46526f4f986d40edfbbc62de9b
SHA1

309d63e3322f937b96561ce0ea5f72652332cd34
SHA256

e6919d57af5f45173469a2fb96695346cae7dca0494eec468020cced95a96cf4
SHA512

54feae4d27a2a3f41f06e427b6f875600bfd2644e386eb3c19d419cf5889162c113b93018da3451e53c8d04a2902e691fc124ad13c808ac1bd34a4d0652eb379
SSDEEP

3072:97WSblW1hryFn1kmiF544LJEknf/2DYMXpe3gBpdM5d/2X:9qSboLrk2miH44FEOf/yp4gm5d/i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44454d46526f4f986d40edfbbc62de9b

Files

44454d46526f4f986d40edfbbc62de9b
.exe windows:5 windows x86 arch:x86

f433e7fcc51e68080022754836705744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree

user32

MessageBoxA

Sections

.text
Size: 59KB - Virtual size: 184KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

wmco70j5
Size: - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

san.0rix
Size: 52KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

p8a8b.uo
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ