544ea0def30334d17c2774dd39817d15 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

544ea0def30334d17c2774dd39817d15
Size

172KB
MD5

544ea0def30334d17c2774dd39817d15
SHA1

43166807a09885c0ed7013b17e1a349d544c85e8
SHA256

cff69a4a16267c206104bdd9c393838c44eb0945725e699c630f2f726adc429f
SHA512

17ad09219a7b8334578623396268cd6e63a1f31dc8d8ba070699de2ada8e592b4f861e164aa36cdeaeb977986d1c1ed326e8eee204ce9324e5111b47e2ae6229
SSDEEP

3072:fa6TlGRJNSKTC8B6kTGXTGv0DImEfgerrluRkrMJLNGM4UC0foE0YFrC:CalcJsKTRUkTGXTLDzEfger7MlrS0gEI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
544ea0def30334d17c2774dd39817d15

Files

544ea0def30334d17c2774dd39817d15
.exe windows:4 windows x86 arch:x86

1014e417d50075b13ec940f61c956112

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
GetCurrentProcess
LCMapStringA
CloseHandle
ExitProcess
LoadLibraryA
CreateFileA

user32

SetWindowLongA
CreateWindowExA
CloseWindow
CharLowerBuffA
wsprintfA

advapi32

RegDeleteKeyA
RegQueryValueA
RegEnumValueA
RegDeleteValueA
RegCloseKey
RegSetValueA
RegEnumKeyA
RegOpenKeyA
RegCreateKeyA

Sections

.text
Size: 146KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ