45f915fa4597db70384ce03892a1c9d5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

45f915fa4597db70384ce03892a1c9d5
Size

160KB
MD5

45f915fa4597db70384ce03892a1c9d5
SHA1

2d9e114cfafa021b14f36bf7b722af9c5f1236b4
SHA256

3a58ad1498bb3661891a5e0a8ee1a03ea78aae6f2996c5c735d5fd9b79a5d8ef
SHA512

0c83720ad77c20cb5dda6ed6dc48c4dfe39e6ca6e6d1dbd583345ef64b22dc109c94135b98240eaa7a48881080a649a4bd1ec5cff51a1b0c0cb6708fce1417e3
SSDEEP

3072:kQp32mMF43dhiaoOSFzriDfIle6vhT6Ha4RSlSafqqc8bCXrwdHd:PGml3y5Fzg6sHwldDcLre9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45f915fa4597db70384ce03892a1c9d5

Files

45f915fa4597db70384ce03892a1c9d5
.exe windows:4 windows x86 arch:x86

f95c3d489bb12bcbac4bf2fe9e9a9ceb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

shell32

ShellExecuteA

Sections

CODE
Size: 143KB - Virtual size: 420KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE