53c4e9cb42228e179151dd32e338ba41 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

53c4e9cb42228e179151dd32e338ba41
Size

72KB
MD5

53c4e9cb42228e179151dd32e338ba41
SHA1

6bbcca61c4eed0e6a5b8df014651a229e770b39d
SHA256

930ecab082b3f09d20aa6ca0bbe7fbb955d3ad1bf94d5314a54b69d3f62384ee
SHA512

cce4530101efa692b90db4684350242d99cc153b4b1feb127450f48be8f40a0bf06e18c0bb74cfffb8800b73ba008c5275cd60f181e45501e3c6c06987b8b492
SSDEEP

1536:2zg/Dc6VTmKURbOZDl78n9IQLfNXOI5pFnyL62PlvXGZD41GEUpPkMqbeT:2kc6VTmXRbOZp82QLlXpFye29v6D41Gf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
53c4e9cb42228e179151dd32e338ba41

Files

53c4e9cb42228e179151dd32e338ba41
.exe windows:4 windows x86 arch:x86

f76e6230615fd94ca94cb5b07f58c2d3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
ExitProcess
HeapReAlloc
GetVolumeInformationA
HeapAlloc
CreateMutexA
CreateProcessA
InterlockedDecrement
MultiByteToWideChar
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetComputerNameA
SetFilePointer

ole32

OleCreate
CoTaskMemAlloc
CoInitialize

user32

SetWindowLongA
UpdateWindow
DestroyWindow
DefWindowProcA
TranslateMessage
CreateWindowExA
ShowWindow
GetWindowLongA
MessageBoxA

oleaut32

SysAllocString
SysFreeString

advapi32

RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegDeleteKeyA
RegOpenKeyExA

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListA

Sections

.text
Size: 60KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ