578ebd27f9a0cbbed9a888350454eb7e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

578ebd27f9a0cbbed9a888350454eb7e
Size

275KB
MD5

578ebd27f9a0cbbed9a888350454eb7e
SHA1

41447af759cb8b314e66a171e4f6661a092696ff
SHA256

97b782f9190ea11eae075718b6c997f13fe187ffe0fa2a78f618bc71df15b166
SHA512

b3af4d99676c25c30240017b44b3a93db971ba4cf51354a97a78506fe5330a5b975a805f807037a1b5a5bfd10cb501acb1e34e59af88eb56a7cdcfac4409da7e
SSDEEP

6144:VcdG5EJDD1LlD1lJ5NDwY9Vo7ysD8RGe73cv3n+8ceaWP9:VcdG5+fFc6ZsD8Iergxcv+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
578ebd27f9a0cbbed9a888350454eb7e

Files

578ebd27f9a0cbbed9a888350454eb7e
.exe windows:4 windows x86 arch:x86

bdc59b38274e5c992d4813c01cb50a21

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstFileA
MultiByteToWideChar
GetEnvironmentVariableA
lstrcmp
GetModuleFileNameA
CreateFileA
GetVersionExA
ReadFile
VirtualAlloc
GetPrivateProfileIntA
lstrlen
VirtualFree
GetPrivateProfileStringA
CloseHandle
GetProcAddress
lstrcat
ExitProcess
LoadLibraryA
lstrcpy

user32

wsprintfA
MessageBoxA

Sections

.text
Size: 260KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 610B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ