4654f3e700708273a59f31dbe29646f9 | Triage

Sharing

General

Target

4654f3e700708273a59f31dbe29646f9
Size

57KB
MD5

4654f3e700708273a59f31dbe29646f9
SHA1

ad491fd0b043f8f1dfe5e787d9952ba4a25fefff
SHA256

8d761cc5e62af977c800bed16f3018cf53182511817adc04b1d83c1c05658db3
SHA512

986a5dc17d151fb68d90e8c38404fb38fc7417198b165554f2fecc6dfb2a23dbe6efd52771e417583b231caf86d3092c335b62a0555b3e6eb616fa90dc67278b
SSDEEP

1536:k5yZJalBog0FGxP4/XV/hJueYHQVsxrxsUbSV6iCpp4eU:k5gQBegxoXV/hJ5AQVsxrxskShG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4654f3e700708273a59f31dbe29646f9

Files

4654f3e700708273a59f31dbe29646f9
.exe windows:4 windows x86 arch:x86

233d43c85d3e6d8c909589d1c7274413

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetCursor
LoadImageA
GetMessageA
DrawTextA

kernel32

SetEndOfFile
lstrcmpA
WriteFile
VirtualAlloc
TlsSetValue
EnterCriticalSection
EnumResourceLanguagesA
EnumResourceNamesA
GetModuleHandleA
GetStartupInfoA
LoadLibraryA
Sleep

ole32

CoInitializeSecurity
OleCreateLink
WriteClassStg
CoGetCurrentProcess

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

code
Size: 17KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE