54d328e0375608fed611ade95ce2ce55 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

54d328e0375608fed611ade95ce2ce55
Size

484KB
MD5

54d328e0375608fed611ade95ce2ce55
SHA1

7598fdd7659a9e7a1b65ad900d9df84cbb13b20e
SHA256

33486ae4d955656f34f20f76c8ef62f665f475ef461a5dcaaeaaab818bb0d1b9
SHA512

2c5be09dfc985cbc4d39ed7a0a9a6a70954fb756dc357076233f20d9b3f94dbec9d4dd3024474448c722b0d0bc4d8208e08619b37bf61a52b39db748866d855b
SSDEEP

12288:JBBbePWtC9mcSzoXhWFNIZ66/WIKjXBkYb:JbePwcwQY/IK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
54d328e0375608fed611ade95ce2ce55

Files

54d328e0375608fed611ade95ce2ce55
.exe windows:4 windows x86 arch:x86

f40ed5ac405232fc6b39811ab7364087

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDefaultLCID
SetConsoleWindowInfo

user32

GetMessagePos
GetShellWindow
DdeClientTransaction

Sections

.text
Size: 478KB - Virtual size: 480KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 321B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE