54fa9ca9afefaf3ebb014ca1a08fb953 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

54fa9ca9afefaf3ebb014ca1a08fb953
Size

514KB
MD5

54fa9ca9afefaf3ebb014ca1a08fb953
SHA1

7f49d91cfacfe0d65f9c593ed340323904b6316b
SHA256

7e9400cf57526a08b0696c1b695436dacca04cba384fde96106be7ae4e2a9bb7
SHA512

8bca55894f29461f0ba277f0b8c01f9ecc9e715a3372278cf122e56b77f030d5800251aaac755ac3ed62c32991cfed396f2c7770e95954af027750beb576d8ba
SSDEEP

12288:9dW53KPh6ghK+u7mHw90+63X8vPH4Ta41v+k7FDUh5VdD+Ngl541Ip:TW53KPh/hHw9x63pO41bIfL+Ng4k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
54fa9ca9afefaf3ebb014ca1a08fb953

Files

54fa9ca9afefaf3ebb014ca1a08fb953
.exe windows:5 windows x86 arch:x86

d68c61c144abb2bd0d6b886ae859bf64

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetModuleFileNameA
FatalExit
RemoveDirectoryA
ClearCommBreak
WaitForMultipleObjects
RemoveDirectoryA
GetProcessHeap
HeapFree
FindClose
CreateSemaphoreA
AddAtomA
CreatePipe
IsBadWritePtr
CreateDirectoryA
GetDriveTypeW
GetModuleHandleA
GetFileType
WriteFile
HeapCreate
DeleteAtom
SetVolumeLabelA
SetEndOfFile
CloseHandle
FindAtomA

cryptui

WizardFree
CryptUIWizDigitalSign
DllUnregisterServer
LocalEnrollNoDS
CryptUIWizBuildCTL
LocalEnroll
CryptUIDlgViewContext
DllRegisterServer
CryptUIDlgFreeCAContext
WizardFree
CryptUIStartCertMgr
CryptUIWizImport
CryptUIWizExport

msrle32

DriverProc
DriverProc
DriverProc
DriverProc

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 740KB - Virtual size: 740KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE