57e7fbc439af9071126fbec1aa5d767e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

57e7fbc439af9071126fbec1aa5d767e
Size

18KB
MD5

57e7fbc439af9071126fbec1aa5d767e
SHA1

c68798db9e0416e93c2ce2e9333d748ccd5e25ad
SHA256

704d5fc238f123818a93d877b9e02ae806b2a479d2d2a9ea94f52a8daed217bd
SHA512

160fc370ca6dca6486b079905ad5b1bb3b5b326a8f9357da7fc28b75791dcaa9ff804d5880bccc0866793f288260989c4b3dc3dad6a64a7c0094bed1c5c21d4f
SSDEEP

192:1dP/u9fzuLlfo2gc7Y1veKT4iAWfBKIgZWXji/l:H/u9fzuLW2dEpehLWfBKIgZWXm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
57e7fbc439af9071126fbec1aa5d767e

Files

57e7fbc439af9071126fbec1aa5d767e
.exe windows:4 windows x86 arch:x86

6ca33f7647ae929d0a2520b197299e1d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetSpecialFolderPathA
ShellExecuteA

shlwapi

StrChrIA
StrStrA

kernel32

lstrcpyA
lstrcatA
WriteFile
CloseHandle
CreateFileA
ExitProcess
FindResourceA
FreeLibrary
GetCurrentDirectoryA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetTickCount
LoadLibraryA
LoadResource
LockResource
RtlZeroMemory
SizeofResource
Sleep

urlmon

IsValidURL

comctl32

GetMUILanguage

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 818B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 357KB - Virtual size: 356KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE