45841a3f63093a6692f3bbf46a94a4e3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

45841a3f63093a6692f3bbf46a94a4e3
Size

63KB
MD5

45841a3f63093a6692f3bbf46a94a4e3
SHA1

8acaff37fbcc4dae3f6c645b3879cc43e6410ce5
SHA256

a3b0113f093379fe992d277c436e9d76826fdaa7ccaa4ed4102bc443724cc0ac
SHA512

c9d20d8d4ca4dd0ce06911e3324e49a444512e1efb01316d926abf067f3ee89e6b3169023eb4e61c14b25b188d487511dd46236571f33dc394201a79e6708fc6
SSDEEP

1536:aIGyebtW8iBaa1lFivMsWOK5hzCom9870TFrYP3zoujqpq7:sys88iQacDdMwhhprq3cujj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45841a3f63093a6692f3bbf46a94a4e3

Files

45841a3f63093a6692f3bbf46a94a4e3
.exe windows:4 windows x86 arch:x86

06d8ce918872db3acd331bc52575637c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleFontSize
WritePrivateProfileStructA
EscapeCommFunction
GetConsoleAliasesA
VirtualProtectEx
HeapWalk
DefineDosDeviceW
SetConsoleFont
WriteProcessMemory
EnumTimeFormatsA
WriteProfileSectionW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE