53fdda8d89f515bd2d254cb08741bc30 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

53fdda8d89f515bd2d254cb08741bc30
Size

56KB
MD5

53fdda8d89f515bd2d254cb08741bc30
SHA1

aa5a212a93e406e2f63ab4950e8eddd27da4b626
SHA256

eb0b3a919514d955d5f6321f41c4180af25a7101f13e18237119de6ae01bdb92
SHA512

8f8ff6aac76c7796f6c57ebd06cfe8fc32a0fe9bc0f7d0c3900d8ad49b2834b66fcb5a0d0636548e627f88d19c91082f62d0d739f2c4f0bf19f0e2d8c95cbcaf
SSDEEP

1536:b+USfEKxE3r8cnn2fgrTL5IggL2l+/071G6pi:b4nqr8c24dLgLSG0wui

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
53fdda8d89f515bd2d254cb08741bc30

Files

53fdda8d89f515bd2d254cb08741bc30
.exe windows:4 windows x86 arch:x86

7f65a095002cbfa90643025ea46d7625

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_adjust_fdiv
__p__fmode
??3@YAXPAX@Z
_except_handler3
__set_app_type
__p__commode
__getmainargs
__setusermatherr
_initterm
_XcptFilter
_acmdln
exit
fopen
_exit
remove
??2@YAPAXI@Z
fwrite
fclose
_controlfp

kernel32

GetStartupInfoA
GetModuleHandleA
GetWindowsDirectoryA
CopyFileA
GetCurrentProcessId
GetCommandLineA
CreateProcessA
GetTempPathA
WaitForSingleObject
FindResourceA
GetLastError
SizeofResource
LockResource
LoadResource
GetModuleFileNameA
GlobalUnlock

user32

wsprintfA
MessageBoxA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1022B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 396B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ