204548f746e501df9696bdbdc2ddacc6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

204548f746e501df9696bdbdc2ddacc6
Size

77KB
MD5

204548f746e501df9696bdbdc2ddacc6
SHA1

fc1bf590620e80d4e494061bf741e343bea85fff
SHA256

4875d8f1f7dc540a748188b93c05815ec450413d7b129872e5fbfbd9fd7f45d0
SHA512

c8ff2550a728eaec9fedd4dcdcba4e2fb321801c52986bbfb8bc49cffe0014190189aba1b0a9a7c4fdd02abcb2a169fde335665ca15df8d3a18f96b3d3eb9ae4
SSDEEP

1536:b7ObiwrfJXLtaD19SrCmvYQWcIH/LRY/N8Bn9Jb:b7Obi2dA59Sr9ArfLU2Bn9x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
204548f746e501df9696bdbdc2ddacc6

Files

204548f746e501df9696bdbdc2ddacc6
.exe windows:4 windows x86 arch:x86

61b16071e9e30e3dd3f4718bc6780ae6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

CloseServiceHandle
CryptGetKeyParam
FindFirstFreeAce
IsValidSid
FreeSid

msvcrt

?name@type_info@@QBEPBDXZ
_cabs
__wargv

user32

IsCharLowerA
GetWindowDC
LoadImageA
GrayStringA
GetSysColorBrush
HideCaret

wininet

InternetGetLastResponseInfoA
InternetEnumPerSiteCookieDecisionW
UnlockUrlCacheEntryFile
InternetSetDialState
ShowSecurityInfo

Sections

.text
Size: 48KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 56KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE