2545ba2f45b399fb8ac6f7a3630cb5eb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2545ba2f45b399fb8ac6f7a3630cb5eb
Size

114KB
MD5

2545ba2f45b399fb8ac6f7a3630cb5eb
SHA1

3e6761ad1681f5b98a02884bb4ebed29d69bc42e
SHA256

9d7716d27b772757e8481b2a7c70bc6acfe681fd8527393135aa079ff6950bc7
SHA512

e986e86e027f07e7f40ea5d76556f7b4bf4c093908e1b152514690ee7561bf52008471e6ca5253772f264240c1072b3d591c382cfbaf137492c3c534e784f125
SSDEEP

3072:D3gYHuXjd/cPjgC4iZFhdU0237zFHQf8DKZGAvhUO:5U/cr74qFvzQ7xHQYSGU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2545ba2f45b399fb8ac6f7a3630cb5eb

Files

2545ba2f45b399fb8ac6f7a3630cb5eb
.exe windows:4 windows x86 arch:x86

f447edc0772cee288d161d574f63321f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegLoadKeyA

user32

GetActiveWindow
IsWindowEnabled
GetCursor

shlwapi

SHDeleteValueA

oleaut32

SafeArrayUnaccessData
GetErrorInfo
SafeArrayPtrOfIndex
SafeArrayCreate
SafeArrayGetElement
RegisterTypeLib

kernel32

GetVersionExA
VirtualAlloc
GetProcAddress
GetLastError
ExitThread
GetModuleHandleA

comdlg32

GetOpenFileNameA
ChooseColorA

version

VerInstallFileA
GetFileVersionInfoSizeA
GetFileVersionInfoA

ole32

CoCreateInstanceEx
CoUninitialize
CoDisconnectObject

gdi32

RestoreDC
BitBlt

Sections

CODE
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 393B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 85KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE