133fd5167fcf45285054c08ab72278a9 | Triage

Sharing

General

Target

133fd5167fcf45285054c08ab72278a9
Size

56KB
MD5

133fd5167fcf45285054c08ab72278a9
SHA1

9167f794966ff478db2a0c4d4bafc8f750c46855
SHA256

e453452807910b10821643b6423119412f028ec70ee6ce679a59b0cd1ec634ef
SHA512

954f4b92100abe89466cd4e208c85efb18d95788ebdc05514b5027f57e1f39f9d86380ef7bf7b60b03697f8e0be5fb0f19c678c136e2ecf3a997f0340c138499
SSDEEP

768:4hYIdZWPtK8w1zKWdnX6qJ1m8Y5rvPuJrZBLmcSU+eVd5fy3+EbEf/Ts:4ti0z/Z10rOJXLWU+MfyuGALs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
133fd5167fcf45285054c08ab72278a9

Files

133fd5167fcf45285054c08ab72278a9
.exe windows:4 windows x86 arch:x86

220b8dd32c684faa5f82aa6235033bac

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetFileAttributesExW
GlobalDeleteAtom
FreeResource
GetPrivateProfileStringW
VirtualFree
CloseHandle
GlobalLock
CreateEventW
SetFilePointer
lstrcpyW
MultiByteToWideChar
LockResource
LoadResource
SetThreadPriority
LoadLibraryA
GetDriveTypeW
GetCurrentProcessId
FindResourceExW
WideCharToMultiByte
FindNextChangeNotification
FreeLibrary
ResumeThread

Sections

.text
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 668B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE