044dcdfdd12c7a9260e12245614cf3b3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

044dcdfdd12c7a9260e12245614cf3b3
Size

64KB
MD5

044dcdfdd12c7a9260e12245614cf3b3
SHA1

580427d888ce7deaed77fea0f878fe9a0f4cadc0
SHA256

ef924f1046729b6389993242e0b4565d1b9777dc19e8ccb714cd743cf53183db
SHA512

d0418b193f716a52343f10fec04edf1541174127f9c2c841de6bb3d9bcb5f4f8d3c4e336da8cee095f017b2d3aaa5556047d3e5233156f7051a8a4f729e489ba
SSDEEP

768:hS4b7KEdCbp9OQuAy+EvxJTHXRW5BlayzhJ6u747otTcGE:hS4fKEIbpwQs+EZJjmfKu7TtC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
044dcdfdd12c7a9260e12245614cf3b3

Files

044dcdfdd12c7a9260e12245614cf3b3
.exe windows:4 windows x86 arch:x86

4c8e7630f3ef3b73bfdaefaa04f925fd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetThreadTimes
DeleteTimerQueue
RtlMoveMemory
RegisterWowExec
SwitchToThread
SetThreadContext
WriteConsoleA
GetCommTimeouts
GetLocalTime
QueueUserWorkItem
GetConsoleCursorInfo
GlobalFree
GetPrivateProfileStructA
VirtualUnlock
CreateHardLinkA
HeapFree
FindFirstFileA
UTRegister
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

icode
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

idata
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

idata
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ