475395bd725df1341730987c1a2e3f7c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

475395bd725df1341730987c1a2e3f7c
Size

76KB
MD5

475395bd725df1341730987c1a2e3f7c
SHA1

a007ce04d615898a39b7907e0912800227c7ae8c
SHA256

e9945334ecde5da5e3ab563f478c2b5a86758e7ab2c65a2722572edf1e652377
SHA512

8648ddeb32abf2e4038a172c76731238e9b4cf1bbcd1ae289a9cf525b59f58308bf19835851452d49e11b6e9fb3c9e82d72e1889c1ef9e72ce86a3c4a6eb233b
SSDEEP

1536:/E9dU7oNVsiP05VqGpZ15oaqqem9PiuLlhEe:j7oNVsq05c2ozqeUPiuLlx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
475395bd725df1341730987c1a2e3f7c

Files

475395bd725df1341730987c1a2e3f7c
.exe windows:4 windows x86 arch:x86

c1a6040249e6be28d3379b6241e51fe9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

waveedit

weInitDLL
weCheckForLostTempFiles
weOpenFile
weNewFile
weSetAutoClose
weShutdown

comctl32

ord17

user32

GetMessageA
TranslateMessage
DispatchMessageA

msvcr71

_controlfp
_onexit
__dllonexit
_except_handler3
__set_app_type
__p__fmode
_c_exit
_exit
_XcptFilter
_ismbblead
_cexit
exit
_acmdln
_amsg_exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode

kernel32

Sleep
GetModuleHandleA
GetStartupInfoA

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE