44e358271b3030e1dd73120d3a2732f5 | Triage

Sharing

General

Target

44e358271b3030e1dd73120d3a2732f5
Size

313KB
MD5

44e358271b3030e1dd73120d3a2732f5
SHA1

2b4bbaf1d90e8c5d5b756cabdb90cf1430a30412
SHA256

e675f2bf32e604c3f32005c17310500326e5da7205f6d35689e50a0dc8214972
SHA512

c8790073262666a806afb4c73dfde5cc97475c7af179d295679e7d228af6da747d574f009dc1b0e3c55726c734fd932aad9cf0e9107643a5a44f697af029b9e8
SSDEEP

6144:eSvQ7TpKwki9Km8oHqH4mUQCwRyGQXXrVi4:IpKwLxo5WDXA4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44e358271b3030e1dd73120d3a2732f5

Files

44e358271b3030e1dd73120d3a2732f5
.exe windows:4 windows x86 arch:x86

46e538034b39b80dcd675803839e0257

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetTimer
SendMessageA
PostQuitMessage
MessageBoxA
KillTimer
GetDoubleClickTime
GetDlgItem
EndDialog
DialogBoxIndirectParamA

kernel32

lstrlenA
lstrcpyA
lstrcatA
WriteFile
Sleep
SizeofResource
MultiByteToWideChar
CloseHandle
CreateFileA
ExitProcess
FindResourceA
FreeResource
GetModuleHandleA
GetProcAddress
GetTickCount
GlobalAlloc
GlobalFree
LoadLibraryA
LoadResource
LockResource

comctl32

InitCommonControls
GetMUILanguage

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 878B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 308KB - Virtual size: 308KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE