57b6dfaea44d7842c5f2e8a19d95e6a2 | Triage

Sharing

General

Target

57b6dfaea44d7842c5f2e8a19d95e6a2
Size

488KB
MD5

57b6dfaea44d7842c5f2e8a19d95e6a2
SHA1

d1cdc7cc621071b34b0ec6e9bcb74746b2d755f8
SHA256

cb513c01b49d43391f2aaf7b9ebd4a4610373f43640874b66debad8e226ac94c
SHA512

3c637102672cd94c14664a339e5a38ebdcff1b3dd0d5e3af0ed7c760739445b09300c39f77cb40d2599dd8a39b12defe6912eaba4b0320b09a23a1023a186652
SSDEEP

12288:0dnkz0oPyOjJy8x5QuvABNW0hjoFR0WZoLv5Ojw:0dnkIopjsmQu90mHTZGv0w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
57b6dfaea44d7842c5f2e8a19d95e6a2

Files

57b6dfaea44d7842c5f2e8a19d95e6a2
.exe windows:4 windows x86 arch:x86

62aebfd363415dc9201474a10489da23

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

RtlFindLongestRunClear

kernel32

GetUserDefaultLCID
LocalFlags

user32

GetMessageExtraInfo

Sections

.text
Size: 478KB - Virtual size: 480KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 194B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE