44adafa9c641f555d78da0a2b5e1117b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

44adafa9c641f555d78da0a2b5e1117b
Size

244KB
MD5

44adafa9c641f555d78da0a2b5e1117b
SHA1

b1bb102817cb30c2e271eeb05b300c995f0c5187
SHA256

e6680cd88611e5ee51b4c7ceb4313896faffce400b07e4a481af9d16092febdf
SHA512

af6195e33b5d72655dfd708710b19a881fbe10fdf9b857fb972e63563b11924b6b4c1a7e6464c6e01473a776c1a33a05c1a94a5239436a90a6a04e9e0c9e09d3
SSDEEP

6144:+f1XnNKUnSFCbSc7YktgvzHcqBNYJCfsooozA/WS:+f1XnNKUnSFBBvjcqL5O4Al

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44adafa9c641f555d78da0a2b5e1117b

Files

44adafa9c641f555d78da0a2b5e1117b
.exe windows:4 windows x86 arch:x86

b71b84b7d5b205bdf07a52d3546410a5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateMailslotW
GetShortPathNameW
FatalAppExitA
DeleteAtom
HeapSetInformation
InterlockedDecrement
lstrcmpiA
_lwrite
FileTimeToSystemTime
GetCompressedFileSizeW
GetVolumeInformationW

user32

DrawIconEx
GetScrollRange
LockWindowUpdate
SetTimer
CharLowerBuffW
LoadStringA
GetMenu
GetDC

gdi32

GetFontLanguageInfo
SetBrushOrgEx
PtInRegion

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 696B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 172KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data0
Size: 60KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE