534145ffa157800aed3eba37fc247295 | Triage

Sharing

General

Target

534145ffa157800aed3eba37fc247295
Size

362KB
MD5

534145ffa157800aed3eba37fc247295
SHA1

9e8a935ed9b7d77a2645543836bb35f8642886ba
SHA256

7588e5fd7d2c697554f0253e19e2b9af86783f20c414d1919b06ed308fe5adee
SHA512

5335d52e98bfc69a6666d3e8c13c37594e77b925a14a20b3bd828cf25728af8984124d88f244b2f67057466ab7c5b6f57c84770515b24083f58b6b1389ab1b2a
SSDEEP

6144:gctG4m+20yEqsZV0ASYKnovptYB2GD91LnFP4pBNInQWG7Ic1SrR:gctG1T0yEnLuYKYp6B19170enkRsr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
534145ffa157800aed3eba37fc247295

Files

534145ffa157800aed3eba37fc247295
.exe windows:4 windows x86 arch:x86

20e88bfb5134e2f42f03e5e058c1d8dd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset
strcmp
memmove
memcpy
_CIcosh
strlen

kernel32

GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
CloseHandle
InitializeCriticalSection
GetModuleFileNameA
HeapReAlloc
HeapAlloc
HeapFree

user32

CallWindowProcA

Sections

.code
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 5B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ