b45c55685972fff96fb55617fcc7825f | Triage

Sharing

General

Target

b45c55685972fff96fb55617fcc7825f
Size

149KB
MD5

b45c55685972fff96fb55617fcc7825f
SHA1

65570566d5017f3482af25af03950af9c2be4f07
SHA256

a53b18f2633bcc3d01254fee6688eb2d6f5b38516aa9dfd89e799229bd1bbcef
SHA512

be88879552a964c5a956cc0494973494b6ffc3cb026d6a159e180b7f9bd12048c9653c94b138d8751ef6ff35556dabacb0cbbe1717079b324ca617826274495d
SSDEEP

3072:hrBEj4sNfzPxn1LEHsaqb67S3C3kibNs4lrA97w:hre8shpJajG3Xs64lE97w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b45c55685972fff96fb55617fcc7825f

Files

b45c55685972fff96fb55617fcc7825f
.exe windows:1 windows x86 arch:x86

bf2ea68d2de4d23f16a54f27060839e5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_mbscoll
_creat
exit
_stati64
wcscat
_gcvt
_controlfp
_acmdln
__setusermatherr
_tzset
__set_app_type
wcsncmp
_adj_fdivr_m32i
_XcptFilter
_fcloseall
_stricmp
_putwch
_mbsicmp
_getche
printf
_mbctohira
putc
_adjust_fdiv
memcpy
_iob
_exit
asctime
__p__commode
_vscprintf
iswalpha
__p__fmode
_initterm
_except_handler3
_wfsopen
_wspawnlpe
__getmainargs
_snwscanf
vfwprintf

kernel32

lstrlenA
WriteConsoleA
GetCommandLineW
FindFirstFileA
GetVersion
UnmapViewOfFile
ExitProcess
InterlockedExchange
FreeLibrary
GetThreadContext
GetModuleFileNameA
GetFileTime
LockResource
GetStartupInfoA
FlushFileBuffers
GetModuleHandleA

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 139KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ