57c4e1df6c09b581eadebdc5419fc476 | Triage

Sharing

General

Target

57c4e1df6c09b581eadebdc5419fc476
Size

28KB
MD5

57c4e1df6c09b581eadebdc5419fc476
SHA1

5c52f8c65aac93b4f28db0d4b8c02bd550ebdf3a
SHA256

786a8ec49e30f47b8ea4c541537999d7cc575e63cd9af2e69818c22ce0397b07
SHA512

a9746c5e3c3cef7a0bcb38d7a3df5380ee51c938ecadd3f1f3d51bad8d8bd7f055ab4f790fd927696d3fc4be97630dd715ed2e74c3d479d95e958d053ed2b2c6
SSDEEP

384:P0CBO6j86b6Dv26LJqE++Kj/88BGfCCnrg6UshIO7/uPCzauVDy6cdYeF:P0+j862v3LYsKDBGM6z/uPCzaLddrF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
57c4e1df6c09b581eadebdc5419fc476

Files

57c4e1df6c09b581eadebdc5419fc476
.exe windows:4 windows x86 arch:x86

233d43c85d3e6d8c909589d1c7274413

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetCursor
LoadImageA
GetMessageA
DrawTextA

kernel32

SetEndOfFile
lstrcmpA
WriteFile
VirtualAlloc
TlsSetValue
EnterCriticalSection
EnumResourceLanguagesA
EnumResourceNamesA
GetModuleHandleA
GetStartupInfoA
LoadLibraryA
Sleep

ole32

CoInitializeSecurity
OleCreateLink
WriteClassStg
CoGetCurrentProcess

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

code
Size: 17KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE