57eb10523b6c363404ece51f47f7c785 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

57eb10523b6c363404ece51f47f7c785
Size

13KB
MD5

57eb10523b6c363404ece51f47f7c785
SHA1

d34ab1e4be96479c7f8d3dea706ad91d9847cc21
SHA256

f01553a8949bd108b7d84317646263efe7ad08023ff1a8fd227acff05c2d66a2
SHA512

6022c082199b72029635dd192f4905f69d300306945c4380ce79215b021de28a66518766f18cacdc59761f9828d958ffdb707984a7b0fb263fe7042ab3a19343
SSDEEP

192:iIWfUVzjVFFOSA1mYdeHeXhLauH7E/w2enAW0jgWmy:i3crF8bmSQKQuH7E/DMAW0jgWt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
57eb10523b6c363404ece51f47f7c785

Files

57eb10523b6c363404ece51f47f7c785
.exe windows:4 windows x86 arch:x86

27837279dd799bf3525628fe4b8127e8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFileTime
GetFileTime
CreateFileA
SetFileAttributesA
GetSystemDirectoryA
lstrcatA
GetWindowsDirectoryA
CloseHandle
WriteFile
LockResource
GetSystemDirectoryW
LoadResource
SizeofResource
FindResourceA
GetProcAddress
LoadLibraryA
ExitProcess
GetCommandLineA
GetModuleHandleA

msvcrt

wcscat

Sections

.text
Size: 1024B - Virtual size: 884B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 994B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ