45df7253f6e78978e0ec48ba3bf008ed | Triage

Sharing

General

Target

45df7253f6e78978e0ec48ba3bf008ed
Size

80KB
MD5

45df7253f6e78978e0ec48ba3bf008ed
SHA1

740f3c16ecab9cc4725737d17eec802c56d1cd11
SHA256

3e5c14c0bc0544fd0abbd6cddd4a50799bde3ef36513740d47cf8467a9975412
SHA512

d98cb9b01efa52c68986bd93012635a247876538a04dea48fd171583732460206e1c9a9215491ef087683037ed977faac6b92ed3c929657e619b79d3f938de30
SSDEEP

1536:4NAROSZaq8ZvCfKQVEPw0eRcT8oHgNzDX1mEfC82hW8fPL:eARx8GSfeqe3XfC8vYL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45df7253f6e78978e0ec48ba3bf008ed

Files

45df7253f6e78978e0ec48ba3bf008ed
.exe windows:4 windows x86 arch:x86

1c008ec41beb942a39c0ee0d9c45b6d0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDevicePowerState
MapUserPhysicalPagesScatter
GetSystemWow64DirectoryW
FindFirstFileExW
ReleaseSemaphore
WaitForMultipleObjectsEx
SetCriticalSectionSpinCount
DisableThreadLibraryCalls
PulseEvent

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rrdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE