53fdf99b5c6415949cede2ea3c5ff873 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

53fdf99b5c6415949cede2ea3c5ff873
Size

160KB
MD5

53fdf99b5c6415949cede2ea3c5ff873
SHA1

8ccd09fc935d3f1faab66bbbd7944ee0d33efe71
SHA256

5007039a8d5884123cddcb0bc1f5e75dd248fc6a054c48aca6aac277d253a407
SHA512

a3259415416d9d76c106664e0c0765e63e888d7f9a27f5e6e5c5fd7e1d6b528267b101eb06d8e3b0ea6e167ba9b72f3b79c355adb243a851fdf3e0eb2f4a971b
SSDEEP

1536:Q1Hp2cmfJ8cdPBoJJaKinUtOMhxQCsvvw9oAS4x3AMBKJSWtnBiLKYmSm6SxxS:QilfJ8RJaUYtw6AwWKE+UKYmSaxxS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
53fdf99b5c6415949cede2ea3c5ff873

Files

53fdf99b5c6415949cede2ea3c5ff873
.exe windows:4 windows x86 arch:x86

0ff0348cbcbafb9bf6d8c5706f78b162

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

srand
wcsncmp

user32

EqualRect
FrameRect
FindWindowA
EnumWindows
FillRect

kernel32

LocalAlloc
VirtualAlloc
ExitThread
GetModuleHandleA
ExitProcess
IsBadHugeReadPtr
LoadLibraryA
lstrlenW
GetCommandLineA
LoadLibraryExA
GetCommandLineW
GetOEMCP
GetProcAddress
GetACP

Sections

CODE
Size: 56KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 64KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

DATA
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.cdata
Size: 4KB - Virtual size: 709B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 836B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ