574c71237aeead1a02e4cb0af6ba168f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

574c71237aeead1a02e4cb0af6ba168f
Size

19KB
MD5

574c71237aeead1a02e4cb0af6ba168f
SHA1

d111fad14cc4bd72eaadeba55163bda0de4c96ca
SHA256

0b19887a0495cb4a621cbec8dc43f2049a7ea1441c7e67b78cc3fe111e9b5aab
SHA512

62afa268a52de8b2b5646803b38a7e9741a5bbf1227fdbd80c1f79c8c1895c7b5fa1d634cefd02b81ed0a7610e5782af20d091e73dc9425128728b978e24f720
SSDEEP

384:cDylUBplOJ0/WzHsHR+JNYQj1UcsepPiUS6JUwAVlLuuDR9SbdzdZHwTMu:TlulQDoS6BcvPBVAVlL/DRw1dZQTF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
574c71237aeead1a02e4cb0af6ba168f

Files

574c71237aeead1a02e4cb0af6ba168f
.exe windows:1 windows x86 arch:x86

2681f1ae91857b95bfc7e7baac01a5bf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
Sleep

user32

MessageBoxA

gdi32

GetTextExtentPoint32A
RemoveFontResourceExA

Exports

Exports

Cqwgfdry
Xskdjyv

Sections

.text
Size: 512B - Virtual size: 498B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE