57a38c1134e3adb7d6d770399824cda4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

57a38c1134e3adb7d6d770399824cda4
Size

448KB
MD5

57a38c1134e3adb7d6d770399824cda4
SHA1

54e2175b032afd12d5b3806a0f5718c3cfc4dd21
SHA256

52a9668e93ace2b900817158ef452339f47f973370b0eadbdca95cad2a19a44b
SHA512

11a87693873aa89040ed2af0dabb98dde34e0be3c7d2943401d07c814ab371523f7f4b76c782636afa62ff6bc35afacfb636134faf0a6e8c6929fbf1312c3bec
SSDEEP

12288:BTzkp35ebiC1gu2gc9z6B6LQnyaOWtoa7ZVoh:BfkJebX1gB9JL7Ethta

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
57a38c1134e3adb7d6d770399824cda4

Files

57a38c1134e3adb7d6d770399824cda4
.exe windows:4 windows x86 arch:x86

257e03ab7423544e6d71b4aa6f7ecc41

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetFileAttributesA
GetEnvironmentVariableW
GetTickCount
CloseHandle
DeleteFileA
SetEvent
WriteConsoleA
HeapDestroy
GetStartupInfoA
FindVolumeClose
HeapCreate
CloseHandle
OpenEventW
GetModuleHandleA
FindResourceExW
ReleaseMutex
OpenThread
SuspendThread
GetCommandLineW

user32

GetCaretPos
PeekMessageA
GetWindowLongA
DispatchMessageA
SetFocus
CallWindowProcW
GetClassInfoA
FindWindowA
GetKeyState
GetIconInfo
IsZoomed
GetSysColor
DispatchMessageA

htui

HTUI_ColorAdjustment
HTUI_ColorAdjustment
HTUI_ColorAdjustment
HTUI_ColorAdjustment

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 608KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 442KB - Virtual size: 441KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ