540cf4a5f79ef3ff131585aa7483333e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

540cf4a5f79ef3ff131585aa7483333e
Size

47KB
MD5

540cf4a5f79ef3ff131585aa7483333e
SHA1

6beb1ff79dc53969ec9e8a2b9cad784a7fe27664
SHA256

50da733da8e17520b69c1b352dfec85c87e014cb95ea7f9c89d8742024f6e06e
SHA512

c67acedfff3c06973f7e1a41bb6463923a20ccdae93140a45b6a9756b8e140a283496bb75c96d4ae9ebd20a6aa245c1141e387756a4ccd88fb35f3dd3a1e852b
SSDEEP

768:jHmtDQ3OcwD7zxlTrxsE9uOPxeYQ4cLpQzxqUAVLcbDxh4dxYJkfWw3NOdfzesu5:jd3PwbxjJuOZQ4Sp84UARchh293+0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
540cf4a5f79ef3ff131585aa7483333e

Files

540cf4a5f79ef3ff131585aa7483333e
.exe windows:4 windows x86 arch:x86

6f1a827dec3fbbed96b0855f2ccec630

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BeginUpdateResourceA
DeleteFiber
GetProcAddress
GetModuleHandleA
Heap32Next
SetConsoleCP
VirtualProtect
VerifyVersionInfoA
VirtualFree
VirtualAlloc
WaitForMultipleObjects

ws2_32

connect

advapi32

RegCreateKeyExA

shell32

ShellExecuteA

Sections

.code
Size: - Virtual size: 144KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 46KB - Virtual size: 48KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE