533bc0f8f206af7404df4950ca8724ab | Triage

Sharing

General

Target

533bc0f8f206af7404df4950ca8724ab
Size

94KB
MD5

533bc0f8f206af7404df4950ca8724ab
SHA1

d1cd925b74688174566f8ae0a0a77df0f73bf7f0
SHA256

3996f084a6781ab35ea74ed38c5df9fcd2b93f00d5601f0a456fa3282d81b2dd
SHA512

437b58d646845c02497a1bf755807487a303aacb0ba7217d6b1e351858915d34a604248cb7e2b9437fcc2c2cc6eab49b01efec3cb88d2fbc78615dfa478429c8
SSDEEP

1536:QgczKs0YqlY8euREUwyFuCG0Y0AisSI+1gltiaFyqH7g15NBbzheN1S507aFzKnL:IesknRTwwG0fAipCltiaFrH7g15NBbkL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
533bc0f8f206af7404df4950ca8724ab

Files

533bc0f8f206af7404df4950ca8724ab
.exe windows:4 windows x86 arch:x86

4d9e9618aa738695932ab0d379992fd2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset
printf
rand
_snwprintf
free
srand
_exit
_XcptFilter
exit
_acmdln
sprintf
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
malloc
_snprintf
memcpy
strlen
wcscpy
strcpy
atol
strstr
atoi
fopen
fclose
strcat
__getmainargs
strcmp

kernel32

SetErrorMode
DeleteFileW
GetModuleFileNameW
GetCommandLineW
GetTickCount
MultiByteToWideChar
CreateFileW
WriteFile
CloseHandle
Sleep
GetModuleHandleA
GetProcAddress
GetStartupInfoA

user32

MessageBoxA

shell32

SHGetSpecialFolderPathW

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ