57c0aef337641dac47f797feb1c2b3331caede4bca40de366e2620eb8ebeaf77 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

57c0aef337641dac47f797feb1c2b3331caede4bca40de366e2620eb8ebeaf77
Size

160KB
MD5

4a572f1d6c0a0ad4d8cec77764692b63
SHA1

87b3663ca9900e5dee4de0efdb833d7004ca2e0b
SHA256

57c0aef337641dac47f797feb1c2b3331caede4bca40de366e2620eb8ebeaf77
SHA512

f5505d097c3405fcefa68fb65f729bd23de68531866f146a6dbcde4e01337d405b25eb7e1dce9b23d0980037417deca21edd8c8740bc90ae6e2304c69faa542d
SSDEEP

3072:PeLqIB0ReWxUzL/SRAlyKNEfw5ndyx6Sp74G7Mh4:Oa8Rlrafw5ndRa4xh4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
57c0aef337641dac47f797feb1c2b3331caede4bca40de366e2620eb8ebeaf77

Files

57c0aef337641dac47f797feb1c2b3331caede4bca40de366e2620eb8ebeaf77
.exe windows:5 windows x86 arch:x86

44e7af86d13bd689602e96dccc077d31

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDirectoryA
lstrcatA
GetModuleHandleA
ExitProcess
MoveFileExA
WaitForSingleObject
GetModuleFileNameA

user32

CopyIcon
SetSystemCursor
LoadCursorA

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 356B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 284B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ