57334e091a0d6f1fd4981bf6bd61cb10 | Triage

Sharing

General

Target

57334e091a0d6f1fd4981bf6bd61cb10
Size

10KB
MD5

57334e091a0d6f1fd4981bf6bd61cb10
SHA1

3519cfcb67ae3981c3bda31c6875693963bee82b
SHA256

79ef6a272ffb4cc5cd0edb5fc2612df7f7fb59e3dfcac2256ee1d138aef8c0a0
SHA512

5ccc352fa5acd80ec3d8f75be6376018e0379da0a53457bc9deda8ffe6f34d088672bf417e62f198f7870554fae5723d2aa6a6572792f5c474f93d9709aba0db
SSDEEP

192:0LfCg51/cYgW/j/5YO0ctnaBZHr8wiuI68Rtl6gN:0Lfd5hRgW/j/5YDugyjRtlv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
57334e091a0d6f1fd4981bf6bd61cb10

Files

57334e091a0d6f1fd4981bf6bd61cb10
.exe windows:4 windows x86 arch:x86

2f16e7ba88bbe298ade0f7593fb8a5e5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CopyIcon
VRipOutput
IMPGetIMEW
CopyAcceleratorTableW
CreateDesktopA
FrameRect

kernel32

GetLastError
VirtualProtect
GetProcessWorkingSetSize
GetComPlusPackageInstallStatus
RequestDeviceWakeup
GetLongPathNameW
OpenSemaphoreA

gdi32

RestoreDC
CreateDIBSection
PaintRgn
Escape

Sections

.text
Size: 4KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE