645c798f297b2f1a3ec1dbeec3d1a109 | Triage

Sharing

General

Target

645c798f297b2f1a3ec1dbeec3d1a109
Size

12KB
MD5

645c798f297b2f1a3ec1dbeec3d1a109
SHA1

92117362cb4e1ae0e12a556717401719ce014ead
SHA256

3ad7ddc75cfc1dd094daa0b1aeb7bc8b6ccb140074fd64047c8cc0c4555be9d8
SHA512

33b3dea94ae88a64b6a21a72a137285df1551da524811671a7bb02fae57987f8e871decbb8d6f4742f8bf3a0dd20b9a5b846b06ae238c69c2e2f5d14eb13892a
SSDEEP

96:cHy2teF36db7NzTbbe/3orvv171yQtQKQYQ:cSC847bU3M7MQjQYQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
645c798f297b2f1a3ec1dbeec3d1a109

Files

645c798f297b2f1a3ec1dbeec3d1a109
.exe windows:4 windows x86 arch:x86

c162473f2b23a9ebcac3fd8a0fcf7b1d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDCEx

kernel32

CreateThread
ExitProcess
GetLastError
GetTickCount
Sleep
WaitForSingleObject

gdi32

EnumFontsA

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 384B - Virtual size: 320B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ