57689bfa577d78ac812c4b4d62f4829c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

57689bfa577d78ac812c4b4d62f4829c
Size

22KB
MD5

57689bfa577d78ac812c4b4d62f4829c
SHA1

8fdb4ca0550cbe6324b4e52d81f7aa59515fefa7
SHA256

79a5ff1531995b4a176ed45ef43b02d1213a1ee74fdbe12cfdf6389affa79306
SHA512

c305cf24887caf5a42366e9dbb414371ec20dda35bc0d3ecd850e04415332a6147ea50f55c4673f6dd0fbe232785e77284b7a60da6f8a265e5804b38a477be5d
SSDEEP

96:nBZ9Htkoudf9LRWFRsjeorfUBNDyFTHO8HaPs5pN/926k55:n39+oiN8R8R7mNyBuONA55

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
57689bfa577d78ac812c4b4d62f4829c

Files

57689bfa577d78ac812c4b4d62f4829c
.exe .vbs windows:1 windows x86 arch:x86 polyglot

beae16623ee946e30f8e0237e5dfe05f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetModuleHandleA
GetTickCount
RtlUnwind

comdlg32

GetOpenFileNameA
GetSaveFileNameA

crtdll

__GetMainArgs
exit
fclose
fopen
fputc
fread
free
fseek
ftell
malloc
memset
raise
rand
signal
strchr
strcpy
strlen
strstr

user32

DialogBoxParamA
EndDialog
DefDlgProcA
SetDlgItemTextA
GetDlgItemTextA
GetActiveWindow
LoadCursorA
RegisterClassA
MessageBoxA

Sections

code
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.avp
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE