04515918a70af88492af5b5f2ca875f6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

04515918a70af88492af5b5f2ca875f6
Size

186KB
MD5

04515918a70af88492af5b5f2ca875f6
SHA1

645d57feb4a92cb21c1785a95139e0a770f968c6
SHA256

b45d77e2eb6968fe103fa4049236df7743f55e75352b3cadbfcfa9f2a6e4becd
SHA512

b6417461d121becb0931fefe38b64c0d695acf7e53edf7d9cf6e9cd407f0a31ad228de7bb62c0b027349f46921770c3e759c1ce7b2bab8ac3f54e4aea89eed57
SSDEEP

3072:6CfyXBoySZaLT0RniDA5xAlGglQRew/uqcGTR804sw2:6CtZaLjA5Y6RV2qDTR8U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04515918a70af88492af5b5f2ca875f6

Files

04515918a70af88492af5b5f2ca875f6
.exe windows:5 windows x86 arch:x86

d8e456540aaf55d5f0e1d7071c1e97a5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathStripPathA
StrToIntA

kernel32

lstrlenW
lstrcpyA

Exports

Exports

?ConsoleInfoReg@567GPAUHINSTANCE__@@U_COMMPROP@@?F
?ConsoleSetRect@567GPAUHINSTANCE__@@U_COMMPROP@@?F
?SequentialAccessTo@567GPAUHINSTANCE__@@U_COMMPROP@@?F

Sections

.itext
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 193KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 155KB - Virtual size: 154KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.itext
Size: 512B - Virtual size: 270B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ