57cac62d9691b270e7de9e7164069ac0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

57cac62d9691b270e7de9e7164069ac0
Size

118KB
MD5

57cac62d9691b270e7de9e7164069ac0
SHA1

d8b7f5f51c9ecc2d19b297d15b82b154658631de
SHA256

f07347d50e81518f3c053258bd8856625a1383463bf7f722bb49d0450080b198
SHA512

77bd5fcde7c01e2249fe0932f32ee73f510d685fd4d1a0507fbfb6cd345561215cee2676193f70c057c18315d0000df07e7f0826f1c558452c334371102bc931
SSDEEP

3072:y58W71wZ2LbYgy6/8D/dDGgqsRQdpNcOxV:y2G1eQY/kQTQdpV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
57cac62d9691b270e7de9e7164069ac0

Files

57cac62d9691b270e7de9e7164069ac0
.exe windows:4 windows x86 arch:x86

35a4942e0773bf7ba132e0584d0e06a3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetCommandLineA

shell32

SHLoadInProc
ExtractIconA
ILGetNext
FindExeDlgProc
PathIsSlowA
PathResolve
SHAlloc

user32

CharToOemW
CreateIconIndirect
FindWindowW
GetClassWord
DestroyCursor
GetMenuState
GetUpdateRgn

Sections

.text
Size: 68KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE