043aa637e4f804322c03ccdccb3f5030c3009b3f3f3da2a6506163007e123674 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

043aa637e4f804322c03ccdccb3f5030c3009b3f3f3da2a6506163007e123674
Size

9.4MB
MD5

44b2aa7a54dd604d4bedc5434a03a846
SHA1

48a80b045427c3d4e5050d945529bf1f40f2dcf2
SHA256

043aa637e4f804322c03ccdccb3f5030c3009b3f3f3da2a6506163007e123674
SHA512

2b1ac2d1fb2d39816d12fbeef55435e4101b654b7b03bb0a458440307dc8f6696fba2a62aca99ffe0945785bb00695e9e1b063d0e4cf1bb4a427cfcea40a63e3
SSDEEP

98304:O5MI6QJ9pnF2MGBLkKOgRTFKRg5WGbrXCQ82ewTXqt5qSbFqSr+7U3WsfG3:6MItfpFIQgRFf5lfXtewT6fISS7vK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
043aa637e4f804322c03ccdccb3f5030c3009b3f3f3da2a6506163007e123674

Files

043aa637e4f804322c03ccdccb3f5030c3009b3f3f3da2a6506163007e123674
.exe windows:6 windows x64 arch:x64

7d1e46538212ac3a885211bc83f92d58

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetCommandLineW
GetConsoleCP
WriteConsoleW
VirtualProtect
CloseHandle
ReadConsoleW
SetLastError
Sleep

comctl32

UninitializeFlatSB
FlatSB_SetScrollProp
ImageList_Copy
ImageList_GetIcon
ImageList_Add
ImageList_Merge
MenuHelp
ImageList_BeginDrag
PropertySheet
LBItemFromPt
ShowHideMenuCtl
InitCommonControlsEx

shell32

SHGetFolderPathW
SHGetDiskFreeSpaceExW
SHHandleUpdateImage

Sections

.text
Size: 148KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9.1MB - Virtual size: 10.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

IDATA
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ