57750cb7b9f0a72b7759f4fa7a396584 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

57750cb7b9f0a72b7759f4fa7a396584
Size

2KB
MD5

57750cb7b9f0a72b7759f4fa7a396584
SHA1

3115ea0fab66684150d87640b19621c5e68172ee
SHA256

ef2103c744e9d12edea4ef9d217d32f80e9aac4350dbdf96942e43900d7ea412
SHA512

73faea525a1583066f4b2cfe8f497bc330c54287d28f60d0c07046b672d73489c4a16b5f85cfafe8710334486bebcbaeceee21135c9b0607130fdde10bf7cc57

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
57750cb7b9f0a72b7759f4fa7a396584

Files

57750cb7b9f0a72b7759f4fa7a396584
.exe windows:4 windows x86 arch:x86

00db466fd2195f763f6ec2bdea1fa021

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetEnvironmentVariableA
lstrcatA
lstrcpyA
GetShortPathNameA
GetModuleFileNameA
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetWindowsDirectoryA
GetSystemDirectoryA
LocalFree
LocalAlloc
ExitProcess
GetProcAddress
LoadLibraryA
Sleep
CreateThread

shell32

ShellExecuteA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 844B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE