537ae589202f127c1560e5a0672721e8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

537ae589202f127c1560e5a0672721e8
Size

359KB
MD5

537ae589202f127c1560e5a0672721e8
SHA1

e0d89cd2b4d71a0b2c6509825933e11ec99df1f7
SHA256

243de7a9d64d2c26d46442dd747288dab6ab865b0156ec6c37f48c8abcd8cff9
SHA512

460dc3e61f567545ebaa521609ea5caecf6596dd807dcb5622aee5daa681f3b4c2ee968eb34d85c5a32230f8b3ef1076430428e7f25dfaacd5d2bcb3f551327c
SSDEEP

6144:GVZJurofp8vaIEJ6v5/ZVImZhTqfXftKhh2gg+wwWdi9IqDk:GJuImTQ6v5IUIlK/2oWdiC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
537ae589202f127c1560e5a0672721e8

Files

537ae589202f127c1560e5a0672721e8
.exe windows:4 windows x86 arch:x86

d41c8870a0520cdb918fc5eeb2b10edb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
TlsGetValue
FindResourceExA
GetDiskFreeSpaceA
ExitProcess
GetTickCount
DeleteCriticalSection
SetEvent
GetConsoleFontSize
VirtualProtect
GetModuleHandleA
Sleep
CreateThread
ReleaseMutex
FindClose
GetLastError
FindVolumeClose
SearchPathA
FindAtomA
CloseHandle

user32

EnableWindow
CreateMenu
CreateWindowExA
CopyImage
EndDialog
GetScrollBarInfo
DispatchMessageA
DragDetect
CloseWindow
CopyIcon
DialogBoxParamA
IsIconic
GetKeyState
GetMessageA

wshbth

WSHOpenSocket2
WSHJoinLeaf
WSHNotify
NSPStartup
WSHIoctl

advapi32

RegCloseKey

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ