3045ad7264f3c7403b0cb2fe6c9a775e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3045ad7264f3c7403b0cb2fe6c9a775e
Size

274KB
MD5

3045ad7264f3c7403b0cb2fe6c9a775e
SHA1

46959f7898b9d0bd3944f96b2b99cee32ccfc19e
SHA256

e47f1839d7eda80f262b568aa16469105ccf15b8d73bdd2be975d23c07b005b3
SHA512

1a6d9bea547d1a85439e2c1caff3ae1c925aba2f40cbf2148f20c4556bedd608e5912eb951470354cb55c16b23d1029e38dcbc0344e07d418929e251fa28f31c
SSDEEP

6144:b91ObapqKDvaADYiAI2XyMoJr9WdM1DLaEUY892w6k5Y:BuapvDvJmsdR9S0zUY892RM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3045ad7264f3c7403b0cb2fe6c9a775e

Files

3045ad7264f3c7403b0cb2fe6c9a775e
.exe windows:4 windows x86 arch:x86

0caa80298bde45fbd8400603920e4b16

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteCriticalSection
GlobalGetAtomNameA
GlobalSize
MultiByteToWideChar
GetModuleHandleW
GetModuleFileNameW
MulDiv
InitializeCriticalSection
GetVersionExA
LoadLibraryW
FreeLibrary
LockResource
EnumResourceTypesW
FindClose
GetVersionExW
GetPrivateProfileIntW
lstrlenW
Sleep
GetPrivateProfileStringW
GetTickCount
GetCPInfo
LoadLibraryA
FindFirstFileW
LoadResource
WritePrivateProfileStringW
GetProcAddress
GetLocaleInfoW

wininet

InternetCrackUrlA
InternetOpenA
HttpQueryInfoA
InternetErrorDlg
InternetReadFile
InternetTimeToSystemTime
InternetConnectA
HttpSendRequestA
InternetCloseHandle
HttpOpenRequestA
InternetTimeFromSystemTime

shell32

DllGetVersion
SHFileOperationW
ShellExecuteW
SHBrowseForFolderA
ShellExecuteExW
SHGetPathFromIDListA
SHGetFolderPathW
ShellExecuteExA
CommandLineToArgvW
SHGetFileInfoA
Shell_NotifyIconA

Sections

.text
Size: 132KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 133KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 139KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ