452837c753362cc9d890ad2beb4bef94 | Triage

Sharing

General

Target

452837c753362cc9d890ad2beb4bef94
Size

93KB
MD5

452837c753362cc9d890ad2beb4bef94
SHA1

c62352c4099103b7ebc515db4b9d1a72198ed8e7
SHA256

e29313564bcc3ee889e4ff45ae4db7faf880beb1110b2386c84d182dedf6350b
SHA512

ebeebe312b59df066b1e81d15dda1452fc52d128465b7ef3d516a84bcd64826b36a93c351cb5c65a14b7e808c70a9158587722d01704897cc3f439f9c8d95bae
SSDEEP

1536:RYwrGVaB6XI4AJ5nFTzYYKiehMfXMWZfSp3tNhzCLw9ng:R9qaB6CRzYprmkWh2dNh2Ong

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
452837c753362cc9d890ad2beb4bef94

Files

452837c753362cc9d890ad2beb4bef94
.exe windows:5 windows x86 arch:x86

4e9bde215610586a0b05110e6adb5c05

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

?terminate@@YAXXZ
_controlfp
__set_app_type
__p__fmode
__p__commode
__setusermatherr
_amsg_exit
_initterm
_acmdln
exit
_XcptFilter
_exit
_cexit
__getmainargs
_ismbblead
??1type_info@@UAE@XZ
??3@YAXPAX@Z
__CxxFrameHandler
_CxxThrowException
_except_handler3

kernel32

GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange
RtlUnwind
GetLastError
CreateFileA
WriteFile
lstrcmpA
ExitProcess
CreateMutexA
GetTempPathA
CloseHandle
LoadLibraryA
GetModuleHandleA
GetProcAddress
GetModuleFileNameA
lstrcpynA
lstrcatA
lstrcpyA
FindAtomA
lstrlenA

user32

IsWindowVisible
wsprintfA
ClientToScreen
EqualRect
InflateRect
GetCursorPos
GetFocus

shlwapi

SHGetValueA

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE