54f4e1505ea5dc92fe6d70d8aea94872 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

54f4e1505ea5dc92fe6d70d8aea94872
Size

324KB
MD5

54f4e1505ea5dc92fe6d70d8aea94872
SHA1

fbba7bac462c484b5027b473bf7b65027d423394
SHA256

709d6722400427e37f147cec6308f29a18d3d1fbde953331dbf092940bff6fc5
SHA512

fae738b9faa5876d8e883bfe480631af7c73cb9aba3433996192f3ae5f297e1981daa023648fc7a610f30adcafcbd2f91737ebdfffaab8b8ce6ed0ea7b9aa49f
SSDEEP

6144:Ckg1nWsDswQxN8Qz6Zivr8FObhKTLBZWD7sfPCDaGQSjg2GqUYDbAae:CkgNmwQL8QuZqMyT7aPWPj8qXbAae

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
54f4e1505ea5dc92fe6d70d8aea94872

Files

54f4e1505ea5dc92fe6d70d8aea94872
.exe windows:4 windows x86 arch:x86

265abbd94158cc893e68214af3bb5de8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersionExW
GetUserDefaultUILanguage
SetEvent
InitializeCriticalSection
FindFirstFileW
WaitForSingleObject
lstrcpyW
GetFileAttributesA
FindNextFileW
GetSystemTime
VirtualProtect
GetLocalTime
VirtualAlloc
CreateEventW
WideCharToMultiByte
CloseHandle
lstrcatA
GetFileAttributesW
GetFileSizeEx

user32

CloseWindowStation
GetWindowTextA
GetMessageA
CloseDesktop
GetDlgItemTextA
GetDlgItem
GetIconInfo
GetWindowThreadProcessId
SendMessageA
ToUnicode
GetClipboardData
FindWindowExA

advapi32

CryptReleaseContext
CryptAcquireContextW
CryptCreateHash
CryptHashData
RegEnumKeyExA
RegSetValueExA
CryptGetHashParam
GetUserNameW
RegDeleteValueA
RegQueryValueExA
DuplicateTokenEx

shlwapi

PathMatchSpecW
PathFileExistsW
PathFindFileNameW
wnsprintfW
wnsprintfA
PathCombineW
StrCmpNIA
PathRemoveFileSpecW
wvnsprintfW
SHDeleteKeyA
wvnsprintfA

Sections

.text
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE