45889d554953bebe3b5ea1c6c39376be | Triage

Sharing

Copy URL Twitter E-mail

General

Target

45889d554953bebe3b5ea1c6c39376be
Size

24KB
MD5

45889d554953bebe3b5ea1c6c39376be
SHA1

d60191e056d0f0f50711791590d64eaed386b648
SHA256

f6516ac342c8b99599fd50b3986744eb239ed0bddae383b6e48394ac34039529
SHA512

ae38f8cb3ee13266e92d61f9fc70b347c03e4dd3d44c5810c85ab1f1d07ed993fabed8b4c93cfc3fd5c1154c402e65b2171575885dc0f210a8bbf7d8d3f71476
SSDEEP

192:/oAH3EMaRxqE+MfNAAWgMsvTOzq+R9G3X6AcimHrluIpd3i9/+dRnwMQmSFsVm:/OA8S7gMsvTwqCGH6fLsIf3SG7xQmJk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45889d554953bebe3b5ea1c6c39376be

Files

45889d554953bebe3b5ea1c6c39376be
.exe windows:4 windows x86 arch:x86

614fd6b1773de140071d26aee6da418b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AddAtomA
ExitProcess
FindAtomA
GetAtomNameA
SetUnhandledExceptionFilter
Sleep
lstrcmpA

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
fflush
fprintf
free
malloc
memset
signal
strcmp
strlen
strncpy

user32

EnumChildWindows
EnumWindows
FindWindowA
FindWindowExA
GetClassNameA
GetMenu
IsWindow
PostMessageA
SendMessageA
ShowWindow

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 640B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 192B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE