a45290f500a05c7bb249dfd24c6509f8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a45290f500a05c7bb249dfd24c6509f8
Size

268KB
MD5

a45290f500a05c7bb249dfd24c6509f8
SHA1

317e95282ac4ee970a421cc282cbf86071325e2e
SHA256

7d0a915dfd52c7048272759ac66887c703add08a74488632541c80901994568f
SHA512

2d0bf566a9e5bec8321453b5eba462437800596fc789a957e1923a0283cd485b753df4212da59069bf60bab6944ca21c8beb6b2b00773f955a00a699f28927ec
SSDEEP

6144:k1GOJlrSewXre35G42ZCOlZ3uYmrAmrsdD1PZwiLmPmnmUgs:yG+SbXre35onWBls/1Ng

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a45290f500a05c7bb249dfd24c6509f8

Files

a45290f500a05c7bb249dfd24c6509f8
.exe windows:4 windows x86 arch:x86

8b3803d9bd4564ccd43998404e81dfcc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVolumePathNameA
GetEnvironmentStringsA
VirtualAlloc
SetConsoleCursorInfo
SetCommConfig
OpenSemaphoreA
InterlockedDecrement
GetNumberOfConsoleInputEvents
GetNumberOfConsoleMouseButtons
HeapDestroy
CreateTimerQueue
HeapCompact
SetFileValidData
GetCurrentProcess
IsDebuggerPresent
SetTapeParameters
GetThreadPriorityBoost
GetCommModemStatus
GetEnvironmentVariableA
RemoveDirectoryA
_lcreat
lstrlenA
ExpungeConsoleCommandHistoryA
VirtualAllocEx
IsValidLocale
OpenWaitableTimerA
SetSystemTime
GetConsoleAliasExesLengthW
WriteProcessMemory
HeapSize

gdi32

SetViewportOrgEx

shell32

SHGetSpecialFolderPathA

winmm

timeBeginPeriod
timeGetTime

Sections

.idata
Size: - Virtual size: 720B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 256KB - Virtual size: 261KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ