157a83008e0e2bd942795f65b3806d5d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

157a83008e0e2bd942795f65b3806d5d
Size

260KB
MD5

157a83008e0e2bd942795f65b3806d5d
SHA1

748ed97e21c86045a5cd7e31c1df50d36dff513b
SHA256

78021249149af801c447f3fd8bb6c85f904a4cb648647cf91d4daa9f8b065fe9
SHA512

97d5e00b0ea44da80e150d20b59dab0c2dff84487ae97c436f4cbce4436ea58ad394c3234c6624b7d7ff07b2edbc4334dd1d911b44002a77be01f088a368d477
SSDEEP

6144:Zuv8QGkH3hrux9bJFVnJq8SWbuK5Mv4XwFpK8NCsV+ZKIEcO:U7A7JnnN1b7tuE8NCPZKIY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
157a83008e0e2bd942795f65b3806d5d

Files

157a83008e0e2bd942795f65b3806d5d
.exe windows:5 windows x86 arch:x86

838812d1257040df5493272779a7ad5f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

StrFromTimeIntervalA
StrCSpnW
StrToIntExW
StrToIntW

kernel32

VirtualAlloc
LoadLibraryA
GetProcAddress

Sections

Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 253KB - Virtual size: 416KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ