439dd4d5b2c3619c5edcd48a6d91de4b | Triage

Sharing

General

Target

439dd4d5b2c3619c5edcd48a6d91de4b
Size

55KB
MD5

439dd4d5b2c3619c5edcd48a6d91de4b
SHA1

45e144a0ca5eac107396d7d59dacfe5d62ba5c76
SHA256

57a4a33a74adc9d5f3c7d7ab0ea41726bbc67e06132f7922c43ba9524a9b4f68
SHA512

e335164777a70dc5a7983e6b6afb0d494b9a7cf523f3155e39933cece2f3dc6250e912453599323a638566f3095633048a683589609c16817030f3da6baaadf3
SSDEEP

1536:jMuur0hWr3bM+ZpC/5qnsLdDlDQHpq0s6+PMVbs:jXK0wrrBu5qnsLdyHpIU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
439dd4d5b2c3619c5edcd48a6d91de4b

Files

439dd4d5b2c3619c5edcd48a6d91de4b
.exe windows:4 windows x86 arch:x86

96b3b3e572ad508828b5d2792b59b8db

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindClose
GetCommandLineA
Sleep
HeapFree
SetEvent
DeleteFileA
RemoveDirectoryA
CreateEventW
SetLocalTime
lstrlenA
FindClose
VirtualProtectEx
CreateMailslotW
CreateFileMappingW
GetModuleHandleA
CreateDirectoryW
SetStdHandle
OpenEventA
GetLastError
ResetEvent
ReleaseMutex
GetFileType
WriteConsoleW
RemoveDirectoryA
WriteFile

uxtheme

GetWindowTheme
CloseThemeData
GetThemeBool
SetWindowTheme
GetThemeTextExtent
OpenThemeData
GetThemeTextMetrics
IsThemeActive
DrawThemeEdge
GetThemeSysSize
GetThemeColor
CloseThemeData
DrawThemeBackground

cmcfg32

CMConfig
CMConfig
CMConfig
CMConfig

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ