53410845688ea45527967c26844ffcbd | Triage

Sharing

General

Target

53410845688ea45527967c26844ffcbd
Size

51KB
MD5

53410845688ea45527967c26844ffcbd
SHA1

45c834d651d7acf80eb44296efeb738de0edf63d
SHA256

026fd0d6222bdc69a9e122070503c54ccedb41e5cb2ed25f1c322ce2089b69bd
SHA512

ed499521deb3b941a37f694bcdf1fa685bb0167367b039823a5f546bf7902cea9d3e16d4b0a85508cd234a2b54e336599034fbeabb9760c59644366cae4c4d5c
SSDEEP

1536:Rda/y/g+qZqrWlhpe8XwHb8zOKch+0uJ6Jug:+oglYrWnkOI8yhru9g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
53410845688ea45527967c26844ffcbd

Files

53410845688ea45527967c26844ffcbd
.exe windows:5 windows x86 arch:x86

49c0aa795512893e774899847834761b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP

Imports

advapi32

CryptAcquireContextW
CryptDestroyHash
RegCreateKeyExA
RegEnumKeyExA
RegSetValueExA

shlwapi

PathCombineW
PathFileExistsW
PathFindFileNameW
PathRemoveFileSpecW
SHDeleteKeyA
StrCmpNIA
StrStrW
wvnsprintfA
wvnsprintfW

user32

CloseDesktop
GetCursorPos
GetForegroundWindow
GetIconInfo
GetKeyboardState
PeekMessageA
SetMenuItemInfoW
ToUnicode

Sections

.wvmbut
Size: 42KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.renst
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zulgr
Size: 5KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ