445fa007632a3847cb2583b751ce0062 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

445fa007632a3847cb2583b751ce0062
Size

351KB
MD5

445fa007632a3847cb2583b751ce0062
SHA1

02fd2438bb3bdd1596b7204e772fa17c1de3ccf1
SHA256

f3e8e798a4338ea424ed8a431cc7e9311541a7a4d1b17b4bdd06c6e214ba2925
SHA512

5078c6e8c0ed9ff682ebc0e8239225aedd062bc6d03cb3f574196832e0f5c6896df92a3b6ee317e5e991dee91938e8042dcb3b769b16331cee755dac2f813ca8
SSDEEP

6144:eM4XLY+YbkK2vglG3Q9XmvhHf2I9fNyTNHU2vyFbJZ3IiWedZzFcJUGVpGx:aXX6kxFQ92vhH591yTXvKbJZ49edZxcO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
445fa007632a3847cb2583b751ce0062

Files

445fa007632a3847cb2583b751ce0062
.exe windows:4 windows x86 arch:x86

fce67081bb4c464c1e4676b63bc118df

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
LockResource
LoadResource
SetLocaleInfoW
FindResourceA
LocalAlloc
LocalFree
CreateFileA
lstrcmpA
GetFileAttributesA
GetProcAddress
GetModuleFileNameA
GetTempPathA
DeleteFileA
CloseHandle
GetCurrentDirectoryA
GetLocalTime
FindClose
FindNextFileA
FindFirstFileA
EnumResourceLanguagesA

oleaut32

SafeArrayDestroyDescriptor
SafeArrayDestroyDescriptor
VarFormatDateTime
CreateErrorInfo
OleLoadPictureEx
GetErrorInfo
SetErrorInfo
GetActiveObject
VariantInit
SysFreeString

msimg32

TransparentBlt

Sections

.text
Size: 219KB - Virtual size: 283KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 129KB - Virtual size: 129KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE