45e333f7adab5418a501a565f17ea2a2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

45e333f7adab5418a501a565f17ea2a2
Size

19KB
MD5

45e333f7adab5418a501a565f17ea2a2
SHA1

83fa821467ce7250d9d041f1ee8e824147aab872
SHA256

3ffde6c330d93bb50d551f7db6a79af923c40d057da7ff44a97b44b3ee64e122
SHA512

a9882f5c683ab1ba551d3ad24a6139f2cb215bd9f924bdf1f57312456746dcad70f02498bd7dbb051f8f5663b81f08b70d9ef1dcc0498d05dc3e9ba416a0b81e
SSDEEP

384:PNjtyRPW9Q50PVQK/KE2cRzi5VhWK8+ulnEuTTtWOeo:7cWh3KE2cxi5VhD8blnEe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45e333f7adab5418a501a565f17ea2a2

Files

45e333f7adab5418a501a565f17ea2a2
.exe windows:4 windows x86 arch:x86

7346b319f1a5a7166b9e4537511d0c74

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
WriteFile
CreateEventA
GetFileAttributesA
lstrcatA
GetProcAddress
LoadLibraryA
GetModuleFileNameA
GetModuleHandleA
CloseHandle
GetTempPathA
DeleteFileA
lstrcpyA
HeapReAlloc
RtlUnwind
ExitProcess
WaitForSingleObject
HeapAlloc
FreeLibrary
lstrlenA
SetFilePointer
CreateFileA
lstrcmpA
SetEvent
CreateThread
GetVersionExA
ReadFile
ExitThread
HeapFree
PulseEvent

user32

GetParent
wsprintfA
DestroyWindow
MsgWaitForMultipleObjects
TranslateMessage
PeekMessageA
CreateWindowExA
CharToOemA
IsWindow
DispatchMessageA

advapi32

RegCloseKey
RegCreateKeyExA
RegOpenKeyA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA

shell32

SHGetFolderPathA

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ