04c2451f0598afa5adfd234587a91046 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

04c2451f0598afa5adfd234587a91046
Size

53KB
MD5

04c2451f0598afa5adfd234587a91046
SHA1

ecfdef32200e8b605a3231551aeba454da765584
SHA256

6e0b0e489a65cb6621f2c56b8d0e9913448049abfe0a80a37fa922d555afd1a6
SHA512

beeeae474b79822f69be76947d98b78aea551d9f8a4406336d26860a43df814702d7dd518b01a0b4e6b51edc9b8c1c12753f8008b353d349f6a6ea738ae08b99
SSDEEP

1536:iiRx2okjZ+bQkXvjj5ikUuvrXhTUvXXpZW0XLL:iakYskX5iuzhTUvXXay

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04c2451f0598afa5adfd234587a91046

Files

04c2451f0598afa5adfd234587a91046
.exe windows:1 windows x86 arch:x86

c45143802b4c90371b00e0eba2f73602

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_BIND
IMAGE_DLLCHARACTERISTICS_WDM_DRIVER
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetComputerNameW
FindResourceExW
CreateWaitableTimerA
GetDriveTypeA
WriteConsoleInputVDMA
ReadConsoleW
GetCurrentDirectoryA
EnumCalendarInfoExA
GetModuleFileNameA
CreateNamedPipeW
CallNamedPipeA
SetLocaleInfoA

user32

CreateMDIWindowA
CharToOemBuffW
VkKeyScanA
GetWindowTextA
SendNotifyMessageA
CallWindowProcA
LoadKeyboardLayoutW
DlgDirListA

gdi32

ExtTextOutW
StartDocA
LineDDA
PolyTextOutA

Sections

.rsrc
Size: 512B - Virtual size: 919B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.icode
Size: 49KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.share
Size: 1024B - Virtual size: 922B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 758B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ