b57dc247d59a9bc63757932346cc8f74 | Triage

Sharing

General

Target

b57dc247d59a9bc63757932346cc8f74
Size

306KB
MD5

b57dc247d59a9bc63757932346cc8f74
SHA1

4addf67866c449dd1ba0b94303683aab45c70dd8
SHA256

b598468f7e056ea520e13fd07f2e83eaa8e474e41d18e34dcdb23a561e852b3a
SHA512

596ba612045e8be490bdad136eedf591bc85ca52cc5b6f7e68a5cc6836358c748fe7d31170305cb7e74913fd345b487c778c017e2f66ccb8b0d79df138be8417
SSDEEP

6144:HEsP/HhWKDVBrAXpN5kr44q4pkCG7lPEvIzUwi5v9O41vq:kUPhbZ1A5s4WpkCGpgwH41S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b57dc247d59a9bc63757932346cc8f74

Files

b57dc247d59a9bc63757932346cc8f74
.exe windows:4 windows x86 arch:x86

9608c61194786f0973975a221336885f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CreateFileA
GetCurrentProcess
CloseHandle
LoadLibraryA
LCMapStringA
ExitProcess

user32

CloseWindow
CreateWindowExA
wsprintfA
CharLowerBuffA
SetWindowLongA

advapi32

RegDeleteKeyA
RegDeleteValueA
RegSetValueA
RegEnumKeyA
RegCreateKeyA
RegQueryValueA
RegCloseKey
RegOpenKeyA
RegEnumValueA

Sections

.text
Size: 263KB - Virtual size: 264KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ