44e1337e602b2c7d00129f216a9e00c7 | Triage

Sharing

General

Target

44e1337e602b2c7d00129f216a9e00c7
Size

20KB
MD5

44e1337e602b2c7d00129f216a9e00c7
SHA1

df1b2b5eae4e17aa10ccb9840166c400ec43312a
SHA256

afe6e54e9bdc32d4ced5cba758bdb44996a241466d3970c7fe2ad75d28c481e3
SHA512

3afa01e8a09e02e81d3e7dfc0adae9196b3c2e91d693f32a24f8d611405055fd1ae234f940ac8401cc3738f743858901ae14c9c60353dec5e23d41f348d67f95
SSDEEP

384:1hhqmMSViry2UakMj3/MV3ZIdUjBKVQK/KfcrS+VDy9WK8mOlnEuTTtWOeo:DsWAlwNs3Kfce+VDyD8DlnEe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44e1337e602b2c7d00129f216a9e00c7

Files

44e1337e602b2c7d00129f216a9e00c7
.exe windows:4 windows x86 arch:x86

d1a8343a4d7cf90317255fea2a6a09cd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateEventA
GetFileAttributesA
lstrcatA
GetProcAddress
ResetEvent
LoadLibraryA
GetModuleFileNameA
GetModuleHandleA
CloseHandle
GetTempPathA
DeleteFileA
lstrcpyA
CreateFileA
RtlUnwind
ExitProcess
lstrcmpA
HeapFree
WriteFile
GetProcessHeap
WaitForSingleObject
HeapAlloc
lstrlenA
SetFilePointer
HeapReAlloc
ExitThread
SetEvent
CreateThread
GetVersionExA
ReadFile

user32

EndPaint
wsprintfA
BeginPaint
GetForegroundWindow
GetDesktopWindow
DestroyWindow
DispatchMessageA
TranslateMessage
PeekMessageA
CreateWindowExA
CharToOemA
IsWindow
MsgWaitForMultipleObjects

advapi32

RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegOpenKeyA
RegQueryValueExA
RegSetValueExA

shell32

SHGetFolderPathA

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ