448dfc4a895370c3b94ad6a5b805ea57 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

448dfc4a895370c3b94ad6a5b805ea57
Size

607KB
MD5

448dfc4a895370c3b94ad6a5b805ea57
SHA1

56274192fad7c2b3744dc35fb36e66bb6d1de157
SHA256

0af289c1d221e61f5b6a4d24fc9377934648520b47a5178107e339653331dc35
SHA512

dbf419a0c44cec0ce3ec6dc645f8f80e8e4a969d27d85026407857a0f9062599753d38b98abf0b6017559fe4bcc5c97f45b274555e7630fd3593d51552c41cd0
SSDEEP

12288:vlzAKpw8U/DE0Z73KsKkn+mSwxYYqsG8jkJS6R3VGB/U3a:vlDpwWs7+mSwxYq52S6RFica

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
448dfc4a895370c3b94ad6a5b805ea57

Files

448dfc4a895370c3b94ad6a5b805ea57
.exe windows:6 windows x86 arch:x86

dc195339b27b4fd5a57110edcd4091c0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStdHandle
FindClose
FindFirstFileW
FindNextFileW
GetFullPathNameW
SetFileAttributesW
WriteFile
GetLastError
HeapAlloc
GetProcessHeap
VirtualProtect
GetModuleHandleW
lstrcmpW
lstrcpyW
lstrcatW
WideCharToMultiByte
WriteConsoleW
GetConsoleWindow

user32

GetDC
GrayStringW
LoadStringW
ShowWindow

msvcrt

_controlfp
_except_handler3
__set_app_type
wcspbrk
_exit
_XcptFilter
exit
__p___winitenv
__wgetmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 996B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 196KB - Virtual size: 196KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ