b540bbc438159fed842b622f1972904f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b540bbc438159fed842b622f1972904f
Size

22KB
MD5

b540bbc438159fed842b622f1972904f
SHA1

69bedda16373695e38cee76e3c918954ac90b711
SHA256

19a03b89a35bcd1a5e20727f65933c816adff4278a5c185a18480f72ee5a3ef0
SHA512

22643e23273064448fc5e356a8dc464e2f156aaac9700357d79a240432a1495db59cc41d6b5f3df8a75d9d8e08b09e1d90ec0811e0f6c0ebeab85b18f89c950c
SSDEEP

384:H4ZiT7+OwGqoRysoy+nniuDWukjvbxNbBhRc:H4DY8iR93ntY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b540bbc438159fed842b622f1972904f

Files

b540bbc438159fed842b622f1972904f
.exe windows:4 windows x86 arch:x86

e36bd4198019129d754cda4c0a4b171a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

UpdateWindow
TranslateMessage
ShowWindow
SetTimer
PostQuitMessage
LoadImageA
KillTimer
GetClientRect
EndPaint
DispatchMessageA
DefWindowProcA
BeginPaint

advapi32

RegOpenKeyExA
RegCloseKey
RegQueryValueExA

gdi32

CreateCompatibleDC
DeleteDC
GetObjectA
BitBlt

kernel32

ExitProcess
GetCommandLineA
GetCurrentThreadId
GetModuleHandleA
GetProcAddress
LoadLibraryA
Sleep
CreateThread

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ