1054a473f60f3906216a71370a0f2ca4 | Triage

Sharing

General

Target

1054a473f60f3906216a71370a0f2ca4
Size

112KB
MD5

1054a473f60f3906216a71370a0f2ca4
SHA1

478391fbbcac5e8eba2d7138626ad4b7c8d88ad5
SHA256

dbc639810ea0c80a4c36e5743ffa2a5487fb4b62589e5d7fa19843f85671247c
SHA512

bf4eb9e4d84c863f1acf4e83093ca5e5905286179d47d6a3d65b783b4c9677b787a121dfe282ebb24f229f979380bad49e38111ad57ef07f0b362b23725e38a1
SSDEEP

3072:n/oitlCy/oVQ0nEIgfKDyG3nM3l/NA3ec5z:n/oiPCy/omZq3nMFoz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1054a473f60f3906216a71370a0f2ca4

Files

1054a473f60f3906216a71370a0f2ca4
.exe windows:4 windows x86 arch:x86

d1b1d470695815e5d2859c5f33b4954e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
FindFirstFileA
FindClose
FindNextFileA
FreeLibrary
HeapFree
ExitProcess
HeapReAlloc
HeapAlloc
Sleep
lstrcpyA
GetProcessHeap
GetProcAddress
LoadLibraryA
GetLastError
lstrcatA
GetModuleHandleA
lstrcmpA
GetModuleFileNameA
GetCommandLineA

user32

wsprintfA
MessageBoxA

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 600B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ecode
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE