557c2e0a44e5fa46668383209dc7d65a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

557c2e0a44e5fa46668383209dc7d65a
Size

65KB
MD5

557c2e0a44e5fa46668383209dc7d65a
SHA1

2543524fb2749208d34e9bfdf235b14ddf705765
SHA256

25b093cbbb774e70ede48b3a4d93c6da06a1f10fb65ca505d1a6f16cf1d6937f
SHA512

268fd453a0d0bd4482c58898c9a902b5a10473bcf9aeeb6ba8be03176b77c393ceaad580fde5dbad777b068a075fa79542568c8b7c0345f002b4dd5659d08650
SSDEEP

1536:9DHg48889/9JOKAJGiHrV22OrVuuEsqOtUbN7rWx:9DHp8J7YxOVu5shU5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
557c2e0a44e5fa46668383209dc7d65a

Files

557c2e0a44e5fa46668383209dc7d65a
.exe windows:4 windows x86 arch:x86

f0ef8dc0762277a6d6cb58a69e627644

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetEvent
GetSystemTime
GetModuleHandleA
VirtualAlloc
GetFileAttributesA
GetModuleFileNameA
CreateProcessW
CopyFileW
lstrlenA
WideCharToMultiByte
LeaveCriticalSection
GetLocalTime
VirtualProtect
ReleaseMutex
ExpandEnvironmentStringsW
GetFileSizeEx
GetUserDefaultUILanguage

user32

CloseDesktop
SetProcessWindowStation
GetDlgItemTextA
GetWindowLongA
GetWindowTextA
GetClassNameA
MsgWaitForMultipleObjects
OpenWindowStationA
DrawIcon
CharLowerBuffA
FindWindowExA
CloseWindowStation
DispatchMessageA
GetMessageA
SetThreadDesktop
ExitWindowsEx

advapi32

CryptAcquireContextW
DuplicateTokenEx
RegEnumKeyExA
CryptCreateHash
CryptReleaseContext
CryptDestroyHash
RegCreateKeyExA
RegCloseKey
CryptHashData
RegDeleteValueA
GetUserNameW
CryptGetHashParam

shlwapi

wnsprintfW
StrStrW
PathCombineW
PathMatchSpecW
StrCmpNIW
PathRemoveFileSpecW
wvnsprintfA
PathFileExistsW
wvnsprintfW
SHDeleteKeyA
wnsprintfA

Sections

.data
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE