44fae8dfb9d75c81cce46b99af654b61 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

44fae8dfb9d75c81cce46b99af654b61
Size

159KB
MD5

44fae8dfb9d75c81cce46b99af654b61
SHA1

8470411305ddc58d4af8f0fc7073689e5545ee48
SHA256

caa17a5150e19c6c41f591adb1624a8bf71fb65fdb960c1f8f7b263993d98d8c
SHA512

c9def12c0ed4bfc98c2049a96f7170cf78e47164e3bd9260d1c57f13d15b371d69388bbb51acf96d2563cc9be5c9a0ac136024e007cdf4ebb2f5dfc97170dbdf
SSDEEP

1536:YGznv5PjuI5J4hiySgAm9dA/MNBRJydAoQUg4e0:YavUI789d7NBRJydAoZgN0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44fae8dfb9d75c81cce46b99af654b61

Files

44fae8dfb9d75c81cce46b99af654b61
.exe windows:4 windows x86 arch:x86

54d15b64ca0af24cd0e66adcd3554983

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GetSystemDirectoryA
FindNextFileA
VirtualFree
GetFileSize
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetProcessHeap
HeapFree
Process32Next
Process32First
CreateToolhelp32Snapshot
WriteProcessMemory
GetProcAddress
GetModuleHandleW
lstrcpyA
OpenProcess
GetCurrentProcessId
ReadFile
SetFilePointer
CreateFileA
WriteFile
GetModuleFileNameA
LoadResource
GetCurrentProcess
CompareStringA
lstrlenA
CreateProcessA
lstrcatA
VirtualAllocEx
GetFileAttributesA

user32

wsprintfA
GetDesktopWindow

gdi32

GetStockObject
SelectObject

advapi32

OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueA

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 308B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 138KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ