c44ecb3aca94997f65fc0f05210446b5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c44ecb3aca94997f65fc0f05210446b5
Size

54KB
MD5

c44ecb3aca94997f65fc0f05210446b5
SHA1

19a9491ac44903ae5d5c8b2def601de3313d2214
SHA256

af9f46eb8f6300d16ef38a5bfd8986f9f3464d4a635d3510232f149e44bba089
SHA512

cd80e458a30e46789d8303491548badf4bea5f70aff2008bbd03e999d5c7b7bb60919af69c506f98345990a6210ed1d70e01e7dd695a596759785c488d4f8fce
SSDEEP

768:T4epSJTahFO2vXfo/Z3nu+aFag6H1xDMuxLVqk3ARKdjUHL5LHKgx9V3Aj4SDVEk:OahFO2vXuwsXTMulVS+jU1G0/G5muW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c44ecb3aca94997f65fc0f05210446b5

Files

c44ecb3aca94997f65fc0f05210446b5
.exe windows:4 windows x86 arch:x86

1fcd75a10faa9798d0f3d26ced46d57e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCPInfo
GetFileTime
FormatMessageA
GetCurrentDirectoryA
GetThreadContext
FileTimeToSystemTime
SearchPathA
LeaveCriticalSection
FlushFileBuffers
GetUserDefaultLCID
ExitProcess
InterlockedIncrement
lstrlenW
OutputDebugStringA
GlobalReAlloc
TerminateThread

msvcrt

__p__fmode
wcscat
wcschr
_stricmp

Sections

.text
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE