53530ab04620e17bdc054fc50984a625 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

53530ab04620e17bdc054fc50984a625
Size

209KB
MD5

53530ab04620e17bdc054fc50984a625
SHA1

8fdfef26d2081c71a0ddae40b945718bdd1c2c00
SHA256

4e69525a7f90c9d37bc97e5da031df113440a132c616fa4fef96b7defbcd213f
SHA512

166580d2c8d5ccc8fd9f1046cab6ae4ca523c534a47ebedd9cae1ddbea5116075ad070fd8ceff5674b932732b3a1587b3bbf062a692a4e85b3a1fe80de40b1fb
SSDEEP

6144:wljUAaps5CnYPR1IOEMnyO0s0YBNow5TNuHkl:2InYPR1PLEsDVpuHk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
53530ab04620e17bdc054fc50984a625

Files

53530ab04620e17bdc054fc50984a625
.exe windows:4 windows x86 arch:x86

691f1193f16065947032ace3a2329e55

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

msvcrt

fabs

comctl32

InitCommonControls

user32

IsChild

gdi32

BitBlt

ole32

CoInitialize

shell32

ShellExecuteExA

shlwapi

PathQuoteSpacesA

Sections

.MPRESS1
Size: 204KB - Virtual size: 752KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE