0504278028e48ba59318734a4aee2a05 | Triage

Sharing

General

Target

0504278028e48ba59318734a4aee2a05
Size

256KB
MD5

0504278028e48ba59318734a4aee2a05
SHA1

69ebbb522810d0d5c36bb9c52000a80e6f10aefc
SHA256

1b77284863c3df8390563667c9e51f76fe25567a6cba1dcd4261b6022e95738b
SHA512

bd94ff900d4376eecc52001cce93eb3a83d60ec6a8ee808b8e685ba6148312ffa008f1236c8bee2e0f6cab7a61c0a05098c2419afb59d915203bed7682eb8249
SSDEEP

6144:JgavCBK6pkCkp8TQe1FOYweF2sQQ09UDkVWEmIga:SKCBKWE9eDOYnF2u8Waga

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0504278028e48ba59318734a4aee2a05

Files

0504278028e48ba59318734a4aee2a05
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 152KB - Virtual size: 549KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE