4522d9fd935a0d761ec008b33eb734ea | Triage

Sharing

General

Target

4522d9fd935a0d761ec008b33eb734ea
Size

471KB
MD5

4522d9fd935a0d761ec008b33eb734ea
SHA1

55c028531e48f1fd9de7c41c9dbfd50eeec27007
SHA256

cfe1f58f8f8ec9bebb9ae59206340e6cb0b134a33dc8799a726186b0812eef40
SHA512

75b4f0bb2664f3f413aacf9072531367a021f29bb8562dce250830dfbf285fb4d5d801c027b7d557bb6dacc84ca69e20035141e4f90533315541cc7a51250faa
SSDEEP

12288:yQ2FiaReVSB5h20NmGA8/E9VYLNiPuV/m:yQ2Fia6yjN1VYVYLgP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4522d9fd935a0d761ec008b33eb734ea

Files

4522d9fd935a0d761ec008b33eb734ea
.exe windows:4 windows x86 arch:x86

35302195f753b1e30e90761078b3295e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalFree
GlobalReAlloc
GetTempPathA
CloseHandle
WriteFile
GetFileType
CreateFileA
SizeofResource
LockResource
LoadResource
FindResourceA
GetModuleHandleA
CreateProcessA
lstrlenA
ExitProcess
FreeLibrary
CreateDirectoryA
GlobalAlloc
LoadLibraryA
GetWindowsDirectoryA
DeleteFileA
GetExitCodeProcess
Sleep
GetCurrentDirectoryA
lstrcmpA
GetCommandLineA
AreFileApisANSI
GetVersionExA
WideCharToMultiByte
MultiByteToWideChar
GetTickCount
ReadFile
SetFilePointer
GetFileSize
FormatMessageA
FindFirstFileA
FindNextFileA
GetModuleFileNameA
FindClose

user32

wsprintfA
MessageBoxA
CharLowerA

shell32

ShellExecuteExA

advapi32

RegQueryValueExA
RegEnumKeyExA
RegOpenKeyExA
RegCloseKey

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 453KB - Virtual size: 453KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ