45f6788613a70013014b5d2f6b6c61a2 | Triage

Sharing

General

Target

45f6788613a70013014b5d2f6b6c61a2
Size

20KB
MD5

45f6788613a70013014b5d2f6b6c61a2
SHA1

dfce6bd34275a80a5b8a59d03e626dd42f0cca2f
SHA256

bcf6a8e4de0a63568008ad8a932196a172a756af2b7250ec992a3ddd70573c58
SHA512

b8f58bb149104cb0b64a18f2306b927a5e02e080a0c434300768a2da9efb156da5a67c69c7069fc46786b1e10447613f22feca6ad743c1f9afa04ee848d00db8
SSDEEP

192:GbXa74L16PkCSUqhqkfQCdzhP4MkjYP1oyPqQ9Z1:eac7P41y1R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45f6788613a70013014b5d2f6b6c61a2

Files

45f6788613a70013014b5d2f6b6c61a2
.exe windows:4 windows x86 arch:x86

7b0d95d269fbbfddb09ac16cc7e2cc47

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetWindowsDirectoryA
GetLongPathNameA
GetTempPathA
GetProcAddress
LoadLibraryA
FreeLibrary
CloseHandle
MoveFileA
DeleteFileA
WriteFile
CreateFileA
GetModuleFileNameA
CreateProcessA
Sleep
GetModuleHandleA
GetStartupInfoA

msvcrt

sprintf
rand
srand
time
_except_handler3
atol
??3@YAXPAX@Z
??2@YAPAXI@Z
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_access
__CxxFrameHandler
_itoa

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ