004c577988aa60a83cf44bc796dea53e | Triage

Sharing

General

Target

004c577988aa60a83cf44bc796dea53e
Size

34KB
MD5

004c577988aa60a83cf44bc796dea53e
SHA1

c66d80416dbe145f138cd54a9e2d167bd44e06ca
SHA256

d47317356bb7d44069e7c38cbb8deb3e1bc472ec90fe270b0ef85f1a6bde67b5
SHA512

da23a3ca1d01e278b168353114339e3d46fca8d6ae5a28d566450b04f4fc8ec3f5c68d3a53f385417475f3275107a0fc264f4e5da57a1bbe49818a81481183bb
SSDEEP

768:TdaYVyu0KnshGZxpv/ncZfgp/6PVo1I/C1setyWvyenC2leD1U:5aeyfheJnG496Pzq1VQWmDU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
004c577988aa60a83cf44bc796dea53e

Files

004c577988aa60a83cf44bc796dea53e
.exe windows:4 windows x86 arch:x86

3d8cac9822d27974d6d15c5b5733e202

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
GetProcAddress
LoadLibraryA

user32

GetClassLongA
GetWindowLongA

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ