04557148ae2df3a32ec060a731754668 | Triage

Sharing

General

Target

04557148ae2df3a32ec060a731754668
Size

488KB
MD5

04557148ae2df3a32ec060a731754668
SHA1

50586a1d7c80ea6fede2fe867106b79d70dba6d4
SHA256

605a67740b44ffdea937446a340096040adb9c40cfb80a13c60330b72ac9d06a
SHA512

ea95b2b7ff4afc0623857dfde8b7653746a3fd6972f5151884ce5351b3538e8ce48c855724ef40d0665d0207af64189b279d5f1c5304870a4ca86366be36d495
SSDEEP

12288:H9DP+jiXJiY1UFYgnpIOCvQyZCYHtRZ5N1J64MEO/tW0fF:HNGQJiS4bnpInvFZ5N11MEOgcF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04557148ae2df3a32ec060a731754668

Files

04557148ae2df3a32ec060a731754668
.exe windows:4 windows x86 arch:x86

9535f80a2819ec5083ebad701891fb8c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

ConvertStringSidToSidW

ntdll

RtlTraceDatabaseCreate
ZwSetDebugFilterState

user32

CreateIconFromResource
GetOpenClipboardWindow

kernel32

GetLastError

Sections

.text
Size: 482KB - Virtual size: 484KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 325B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE