0570a67bca379c09f9c4b1052a24752a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0570a67bca379c09f9c4b1052a24752a
Size

50KB
MD5

0570a67bca379c09f9c4b1052a24752a
SHA1

c2b8081905ef5080f44607ac53cc9c2a7803c4b7
SHA256

d5efa7a8e5253a5569d83a8a608fc739b53bd5fbbcf1c423db3b5c646ba6e70f
SHA512

bc5ad22687bb4916e34f294aee243bce143b60bce40423ed9b7989cf7cb70058a1cfa8118a4d5e831a5ea7cb801ea406e1be4ba041af4fd395cb9199c761c54f
SSDEEP

1536:NplfE79MXiSzWBQWyUXFJzMzNadsV279:XlfEh0SBQWycdJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0570a67bca379c09f9c4b1052a24752a

Files

0570a67bca379c09f9c4b1052a24752a
.exe windows:5 windows x86 arch:x86

395b0695296d75a9ff3d0cd274b9a9ef

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA

shlwapi

PathCombineW
PathFileExistsW
PathFindFileNameW
PathMatchSpecW
PathRemoveFileSpecW
StrCmpNIA
StrCmpNIW
StrStrW
wnsprintfA
wvnsprintfA

user32

DrawIcon
EndDialog
GetDlgItemTextA
GetKeyState
GetWindowLongA
GetWindowTextA
GetWindowThreadProcessId
MsgWaitForMultipleObjects
ToUnicode

Sections

.xaxsh
Size: 40KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.erchkj
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nidkd
Size: 5KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ