574d4eab77ca78f3bab0dc44c03a468c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

574d4eab77ca78f3bab0dc44c03a468c
Size

70KB
MD5

574d4eab77ca78f3bab0dc44c03a468c
SHA1

439c3744c5463bb9fb26805392d0c46b9efb1f75
SHA256

aacfa6b4642d6c662de8ba4d26f582cd2fba57774b527a45641b0c9a46b8c43f
SHA512

51399120a2b560452fead13f7dd2fc2d6205c41feb99449fbc220c9b62ab506a3c718183bcdcc61496b7a3a817ce41e5b9a18cfc80abc18a16196c04af703361
SSDEEP

1536:tJn6/Q3hpxIb8kBZFFelyKw/VQHYi3fEsdV3W5EbnCAFT4CbuoC0:mQ3hpWb5DifssdVGunICyt0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
574d4eab77ca78f3bab0dc44c03a468c

Files

574d4eab77ca78f3bab0dc44c03a468c
.exe windows:4 windows x86 arch:x86

5f821307a8022b16fa5df93aa1351297

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ulib

??0OBJECT@@IAE@XZ
??OTIMEINFO@@QBEEV0@@Z
?AppendBase@PATH@@QAEEPBVWSTRING@@E@Z
??0FSTRING@@QAE@ABV0@@Z
?SetFileName@FSN_FILTER@@QAEEPBVWSTRING@@@Z
?QueryScreenSize@SCREEN@@QBEXPAG000@Z
??1PATH_ARGUMENT@@UAE@XZ
??_7FSTRING@@6B@
??1BYTE_STREAM@@UAE@XZ
?Stricmp@MBSTR@@SGHPAD0@Z

user32

MapWindowPoints
SetTimer
InsertMenuW
DrawEdge
GetDlgItem
GetMenuItemCount

gdi32

GetDeviceCaps
SaveDC
SetBkColor
GetTextExtentPoint32W
Rectangle
GetTextMetricsW

advapi32

AdjustTokenPrivileges
RegCreateKeyW
AllocateAndInitializeSid
FreeSid
RegSetValueExW
GetLengthSid

Sections

.text
Size: 65KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ