54c6f0654b93d2f105b66db4fa10b5ed

General

Target

54c6f0654b93d2f105b66db4fa10b5ed
Size

1.9MB
MD5

54c6f0654b93d2f105b66db4fa10b5ed
SHA1

9ff6655d6c17abda2de2d173d596f8264388c437
SHA256

a8ab6a4b51c1f055d344543e105acca7d66191ea3f223eae1f44943f6e3a68da
SHA512

3e4e87ca56161fcad78b07f4a1d84a8cd23d9b91558cfab14de39e47c8feb8e119b2b9f2f952e9f5436d895b52dc9a0b4b380fe0d369217c94a8091af9721dd8
SSDEEP

49152:3ZfKwJkIEj9rEEgebEksgZJcoDGYkSb+kWuAJ:4weI694EgenDz+V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
54c6f0654b93d2f105b66db4fa10b5ed

Files

54c6f0654b93d2f105b66db4fa10b5ed
.exe windows:4 windows x86 arch:x86

a9f5365f51728a433042c22204e93260

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AddAtomA
BeginUpdateResourceA
CloseHandle
CreateFileA
EndUpdateResourceA
ExitProcess
FindAtomA
FindResourceA
FreeLibrary
GetAtomNameA
GetCommandLineA
GetCurrentProcess
GetFileSize
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetStartupInfoA
LoadLibraryA
LoadResource
LockResource
ReadFile
ReadProcessMemory
SetUnhandledExceptionFilter
SizeofResource
UpdateResourceA

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
fflush
fprintf
free
malloc
memset
signal
strcmp
strlen
strncat
strncpy
strstr

shell32

ShellExecuteA

user32

LoadStringA

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 800B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a9f5365f51728a433042c22204e93260

Headers

File Characteristics

Imports

kernel32

msvcrt

shell32

user32

Sections

.text Size: 7KB - Virtual size: 6KB

.data Size: 512B - Virtual size: 160B

.rdata Size: 512B - Virtual size: 288B

.bss Size: - Virtual size: 800B

.idata Size: 2KB - Virtual size: 1KB

.rsrc Size: 1.9MB - Virtual size: 1.9MB

.text
Size: 7KB - Virtual size: 6KB

.data
Size: 512B - Virtual size: 160B

.rdata
Size: 512B - Virtual size: 288B

.bss
Size: - Virtual size: 800B

.idata
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 1.9MB - Virtual size: 1.9MB