05742010c40a6699581b31ddb4393ee0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

05742010c40a6699581b31ddb4393ee0
Size

15KB
MD5

05742010c40a6699581b31ddb4393ee0
SHA1

5abf5e626133b9c1b839974a1fb457e626062d35
SHA256

dd63c357f9ea8e190f28afcc9aee559ffc32b8fc977b43c8c2a3ea42d7290bac
SHA512

a6b2d66e3a07d1a5163ae2813e6a8cdd5ef5866f2486da36ca3701e56604b01407ee0a8d6b4bfdffa0cb596f167ba670c2c1af8a140574e039b0d0560635d290
SSDEEP

384:PPKno1CZv8Dc3XYBmdwPfD4sbJDEQVz2RN4brU+di:4IaYcnYYdwnD4uJZE4/pdi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05742010c40a6699581b31ddb4393ee0

Files

05742010c40a6699581b31ddb4393ee0
.exe windows:4 windows x86 arch:x86

4acd57ebd8da8dd21d89135db05e30e9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
wsprintfA

kernel32

GetTempPathA
lstrcpynA
lstrcpyA
CloseHandle
CreateFileA
CreateProcessA
ExitProcess
FindResourceA
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetStartupInfoA
LoadResource
LockResource
RtlZeroMemory
SetLastError
SizeofResource
WriteFile
lstrcatA
lstrcmpiA

Sections

.text
Size: 1024B - Virtual size: 694B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 894B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ