54861180e764465c3df70b66215c1c6c | Triage

Sharing

General

Target

54861180e764465c3df70b66215c1c6c
Size

60KB
MD5

54861180e764465c3df70b66215c1c6c
SHA1

37c8de6724a979069b42651f1817db6b95d262a2
SHA256

bdcb2215e1a75b45de150b6b242833236890ab69c937da078794aa199c42cf57
SHA512

a1085a52447a99c4126bd86553d3a6a73fb106ab40f1fc6353593b8d96f175da96c9aca7ef8e0c3e907fd9e6229ce6cf132905cee814e8e6d2027c5cc63bc339
SSDEEP

768:UA+1SEbfrT9ynITjF0J0JRsbfp9580G+O02:g1SAT9yreC580PU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
54861180e764465c3df70b66215c1c6c

Files

54861180e764465c3df70b66215c1c6c
.exe windows:4 windows x86 arch:x86

cc6b0a4517c1d73d3c8a98d3791e08fc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__p__commode
__p__fmode
_adjust_fdiv
_controlfp
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_except_handler3
sprintf
__CxxFrameHandler
strstr
strrchr
__set_app_type
_strlwr

kernel32

CreateMutexA
CreateThread
GetStartupInfoA
GetModuleHandleA
OpenProcess
WideCharToMultiByte
IsBadReadPtr
GetProcAddress
LoadResource
LockResource
SizeofResource
CreateFileA
LoadLibraryA
Sleep
GetLastError
MapViewOfFile
CloseHandle
GetModuleFileNameA
SetFileAttributesA

ole32

CoCreateInstance

oleaut32

SysFreeString
VariantClear

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ