c44d2f91ec87a5c34957513a96779be8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c44d2f91ec87a5c34957513a96779be8
Size

209KB
MD5

c44d2f91ec87a5c34957513a96779be8
SHA1

fc426bde64c3f191f574257149ea596871ec8f9c
SHA256

72ef80e2eb52f75e6b455548b1475cbcded340466d21d6de7c0cd18623918545
SHA512

2f6089d4d2ad5e8c0043d498f2a48b27ebef05262d8484d4707536e860c79e00014ebf2ef4042f8ac9636369ede054c48502ab7db1cb38cd67588f0216d05ee3
SSDEEP

6144:Dl2EN4D3MONJkBMSaX5v2/5UpFiz6nzcEEM7GA:kENXWWR+5v6UpFm6nLGA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c44d2f91ec87a5c34957513a96779be8

Files

c44d2f91ec87a5c34957513a96779be8
.exe windows:4 windows x86 arch:x86

691f1193f16065947032ace3a2329e55

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

msvcrt

fabs

comctl32

InitCommonControls

user32

IsChild

gdi32

BitBlt

ole32

CoInitialize

shell32

ShellExecuteExA

shlwapi

PathQuoteSpacesA

Sections

.MPRESS1
Size: 204KB - Virtual size: 752KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE