45458ac0ec91f87d1e40d3acb07cc8c6 | Triage

Sharing

General

Target

45458ac0ec91f87d1e40d3acb07cc8c6
Size

197KB
MD5

45458ac0ec91f87d1e40d3acb07cc8c6
SHA1

c213d5f72a5e0fbf8edea5f14d6b5b708ecc2cd0
SHA256

eb11a05c6fbcc952b70fed09cbd261ad621bcb72c7a331443cf78d0f80856766
SHA512

a522351cda320c3832a4c5b40bf7233fccdd011aace6259b8d54f35b5fad902f395d71bafd660e011b0c4dc57b9c21bbfd82e699e68b2afc0d34fcab2ca8e9d6
SSDEEP

6144:zB2lqmTozJQgPv7x8aTyOwjoJyT1IirEiJWbx:zmUlpTPAgyTLEiJYx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45458ac0ec91f87d1e40d3acb07cc8c6

Files

45458ac0ec91f87d1e40d3acb07cc8c6
.exe windows:4 windows x86 arch:x86

7d5139bd219ca02480044e41ec38a959

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

user32

RealGetWindowClass
LoadIconW
MapVirtualKeyW
GetSystemMetrics

msimg32

AlphaBlend

setupapi

CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status

kernel32

CreateFiberEx
GetCurrentThreadId
TlsAlloc
TerminateThread
TlsGetValue
TlsFree
EnumResourceNamesW
LoadLibraryA
GetLastError
FlushFileBuffers
GetLocaleInfoW
FoldStringW
Sleep
VirtualProtect

Sections

.text
Size: 172KB - Virtual size: 171KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 764B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 224KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ