45147cceb88022bb007bf8f8fc74f637 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

45147cceb88022bb007bf8f8fc74f637
Size

132KB
MD5

45147cceb88022bb007bf8f8fc74f637
SHA1

134c1fd963479d9ed7b9f2a977fe139ebf13383b
SHA256

98cc220418cc9f41719328d0061c59083db7f95e6333317bb0b883e99a38f8b4
SHA512

852e548724630ec1d4ae3fc93c910027255c065ec9c22dc9d7db881c98c659e03464c89a00383b7199c2e2eb2623c893cd8e3a0ab73952d9d2d7163fe61d72d5
SSDEEP

3072:83YB0hEEWhXrAqylTG6xuAbD9DT1nlZpKnKafY3:06hXr7ylC6QA9FnlZpahA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45147cceb88022bb007bf8f8fc74f637

Files

45147cceb88022bb007bf8f8fc74f637
.exe windows:4 windows x86 arch:x86

5e74fffe2e7526c3717c8203f08a3877

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
ExitProcess
GetStartupInfoA
EnumResourceNamesW
OutputDebugStringA
LeaveCriticalSection
SetCalendarInfoW
EnumSystemLanguageGroupsA
SetVolumeLabelW
DeleteTimerQueueEx
FindFirstVolumeMountPointA
WaitForDebugEvent
RtlFillMemory
LocalAlloc
VirtualFreeEx
SetSystemTimeAdjustment
GetConsoleCursorInfo
DeleteCriticalSection
EnumSystemLanguageGroupsW
SetProcessPriorityBoost
DuplicateHandle
GetPriorityClass
Sleep
GetCurrentProcessId
SetHandleCount
LoadLibraryExA
ConvertDefaultLocale

Sections

.data
Size: 8KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.init
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.init
Size: 4KB - Virtual size: 476B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ