044b33359bdbf431ffbc6df1a80069f9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

044b33359bdbf431ffbc6df1a80069f9
Size

5KB
MD5

044b33359bdbf431ffbc6df1a80069f9
SHA1

8c75525d47a65eb178c9d321c204a2c7058c1a0a
SHA256

cb652ec89d0e4498a75c6c2104401eb199137f2d7237be466df23f2a68d1e717
SHA512

45ebcde091451591b83215e3be5ee33a6d5188a902246b0ebe1d274db58f016a0b4dbb57570aaf623fe5bb66ee25ca97924ad791a1880512415f935a9d5266a5
SSDEEP

96:+Zol4lPynqp2Z6yAsViECRIkZ90o3OesHFU7OZwxjTybPZZ+HVEmC:+1kDEjVECxLr3bBxjTWpmC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
044b33359bdbf431ffbc6df1a80069f9

Files

044b33359bdbf431ffbc6df1a80069f9
.exe windows:4 windows x86 arch:x86

d7c62e7aca012961b6de429b4ee0fe77

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleAliasExesA
FormatMessageA

user32

MessageBoxA
LoadCursorFromFileA

gdi32

GetCharWidthFloatA
DeviceCapabilitiesExA

Sections

.share
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.icode
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 309B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ