54ea91345cef3e62a9c4a34b72699d9d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

54ea91345cef3e62a9c4a34b72699d9d
Size

259KB
MD5

54ea91345cef3e62a9c4a34b72699d9d
SHA1

8d44c59d7348188255029ba5f35526d0c10c0944
SHA256

8637d494dcc21d57b89d0628784f1d279981a4e4e7bfcbcea940a00aa305faf2
SHA512

dc413375e9ab1a093f8724fc6e36bcc4d92794291136a31c8d8722344cca0f8d93b18ab01e7699bf89ea9213c48f8446622f0bb9c991c0fd3166d37d8f9e95a1
SSDEEP

6144:1BfKo62bOBBrIaCkqELAwhXzlE1Jy2sWdiZrm7QIgycT90x6Uv:1B7ANrqe5jlyJurigdT9dUv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
54ea91345cef3e62a9c4a34b72699d9d

Files

54ea91345cef3e62a9c4a34b72699d9d
.exe windows:4 windows x86 arch:x86

83f1805499ae29d5fd3e7895909e79f5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetLastError
GetStdHandle
MultiByteToWideChar
VirtualProtect
GetStartupInfoA
EnterCriticalSection
GetCurrentProcessId
SetStdHandle
GetOEMCP
GetVersion
GetCurrentProcess
SetConsoleCP
ExitProcess
GetModuleHandleA
GetACP
InterlockedCompareExchange
LocalAlloc
HeapAlloc
FreeLibrary

advapi32

RegSetValueExW

ole32

CLSIDFromProgID

rpcrt4

RpcStringFreeA

user32

KillTimer

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 800B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 210KB - Virtual size: 213KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ