45449195ebd1dc8575060f4c3741be5e[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

45449195ebd1dc8575060f4c3741be5e.exe
Size

8KB
MD5

45449195ebd1dc8575060f4c3741be5e
SHA1

3f3eb1cf0c281673e09b0e2f96a8c807217d983b
SHA256

d4bf9c8ac586c385e691e3d8a7e6431fef98c995eff97a7faf05fac34ec9841d
SHA512

896a9d4e7a675ac6ae400507891e40227d964ba7cd1a8953f7adbe428c9ca84ef6b9bd66576311158bc755255d8a76a5ed521fb0144a0fd1048988e1364867b1
SSDEEP

96:7UkiF1OG+Hp2v0r5XczYTSnLe5LsfamXdAeylHGaezNrVIUr:7LNHIMrCzYT6iAAeezezlu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45449195ebd1dc8575060f4c3741be5e.exe

Files

45449195ebd1dc8575060f4c3741be5e.exe
.exe windows:4 windows x86 arch:x86

e569dab882f11190c0fd9f03eab05f80

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
CreateThread
CreateToolhelp32Snapshot
ExitProcess
GetCommandLineA
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
LoadLibraryA
Module32First
Module32Next
MoveFileA
OpenProcess
ReadProcessMemory
RtlZeroMemory
WinExec
WriteFile
WriteProcessMemory
lstrcatA
lstrcmpA
lstrlenA

user32

wsprintfA
CharUpperA
CreateWindowExA
DefWindowProcA
DispatchMessageA
GetMessageA
GetWindowTextA
GetWindowThreadProcessId
LoadCursorA
LoadIconA
PostQuitMessage
RegisterClassExA
SetTimer
TranslateMessage

wininet

InternetOpenUrlA
InternetOpenA

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ