54606b57ea9fb0ab3abf630cb256c6a6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

54606b57ea9fb0ab3abf630cb256c6a6
Size

672KB
MD5

54606b57ea9fb0ab3abf630cb256c6a6
SHA1

b0fde8960ac626dcba6b0d361fbea43825244a12
SHA256

4222f5de03ff3ea52e70523af648688a24ac9469fa9a93b8f5268bc707fccea4
SHA512

097b83ed9086f048c891817516d3041034e953b10ea4833cc04b3069534ee78390c89e3aca46937f13123e7ac94974a7cedbb51b835d68e900c0b75b63ef3444
SSDEEP

12288:onEKYdy/F/tY0R5d623p21viO4VNB8rtGrjtM72CDJLTJxGdhdFDiD/ZFFPEP03:onEGFhRd5214rjCDPCY/Z3PEU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
54606b57ea9fb0ab3abf630cb256c6a6

Files

54606b57ea9fb0ab3abf630cb256c6a6
.exe windows:4 windows x86 arch:x86

f433e7fcc51e68080022754836705744

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree

user32

MessageBoxA

Sections

sendwy3o
Size: - Virtual size: 4.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

ewc4q80t
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

mqebvc3n
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

z66pbspi
Size: 639KB - Virtual size: 640KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

glu1ajnu
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ