45c27862a8ff6d721dd614869b656aa2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

45c27862a8ff6d721dd614869b656aa2
Size

355KB
MD5

45c27862a8ff6d721dd614869b656aa2
SHA1

431e875bb96e7156725670db8be7a64bac2318a9
SHA256

20dfae1e9db321390d47ed6b8dbc1aed73ef77df944bb053d32a20cae49c352a
SHA512

e2b40aaf240aa995c57880a8d7260bd38151fe82c8e2deb74504e4f53b58cdbdde2f3b123b685606122b8a04752220f15aeb5723bf840a7041a7be8ec07e9274
SSDEEP

6144:QhDoZ3fsu8isVVRdB4etHsWDZv8jU2JbcfGxcdbL70ktF/wNJRDQ91LC1s7cO/V+:QFVu8iE/B4etZDZvexeLbwbRcbCC7cO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45c27862a8ff6d721dd614869b656aa2

Files

45c27862a8ff6d721dd614869b656aa2
.exe windows:4 windows x86 arch:x86

655421e6f4e74ddc91c393d3cbd5079a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GlobalFree
CreateFileA
CloseHandle
GetTickCount
FindAtomA
GetLocalTime
GetLastError
lstrlenW
GetComputerNameA
TlsAlloc
SetLastError
GetPrivateProfileIntA
ExitProcess
FindClose
GetStdHandle
MapViewOfFile
GetModuleHandleW
GetFileAttributesW
TlsGetValue

user32

CloseWindow
GetClientRect
DrawStateA
CallWindowProcA
FillRect
GetMenu
CreateWindowExA
GetCaretPos
GetDlgItem
DispatchMessageA
GetClassInfoA
EndDialog
DestroyCaret

clbcatq

ComPlusMigrate
ComPlusMigrate
ComPlusMigrate
DllGetClassObject
ComPlusMigrate

d3dim

D3DFree

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 440KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 346KB - Virtual size: 345KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ