a45c8015a6c5685b0534aa29434e917d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a45c8015a6c5685b0534aa29434e917d
Size

404KB
MD5

a45c8015a6c5685b0534aa29434e917d
SHA1

12f38b3edbe0322898547d1b880e4d58054fe548
SHA256

4f7904210fbe45d43391b90d6e99fe6f0d8581a2958a1667d169176cc4bd8aca
SHA512

941a6bc2420c5a574738e159a058784e014c3a496ee779ca6ecd175b4cee9644bfedf3d23bedd959b58187e1efd09b507bd9c20cb833e84031ede7cda513b0dc
SSDEEP

12288:mHB02Z5hVOg80nTFToCgQcbzdMweKMMi:mi2Cg80hToCgQcPdFbk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a45c8015a6c5685b0534aa29434e917d

Files

a45c8015a6c5685b0534aa29434e917d
.exe windows:4 windows x86 arch:x86

9e976541636e8f8af2199e4495cffedd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
lstrcmpiA
GetProcAddress
VirtualAlloc
GetTickCount
CloseHandle
SetEvent
CreateFileA
GetModuleHandleA
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
HeapFree
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
HeapAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
GetStringTypeW

user32

LoadIconA
LoadBitmapA

msacm32

acmDriverDetailsA

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 332KB - Virtual size: 725KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ