c57eb28bc4415cdd6d30cfdeb3213c47 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c57eb28bc4415cdd6d30cfdeb3213c47
Size

58KB
MD5

c57eb28bc4415cdd6d30cfdeb3213c47
SHA1

c7b657161d3495c5a0174c3d0c1b48f45575d567
SHA256

9942649f224c0340f020df71eeb822b90cb32351de5107534450c22f6250cdb2
SHA512

10314d4156722da44bdcc263de84699350f0b3c6a5943612c1c876bfff971a423bf4b3f05084779a117c929fa389e7fc004fa30041b53f1694d80661ef873677
SSDEEP

1536:BnusV5E2aFFyQXL8e/bLbHGwvqVNPvaxu9:BusV5EjFymH/7GkqvPo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c57eb28bc4415cdd6d30cfdeb3213c47

Files

c57eb28bc4415cdd6d30cfdeb3213c47
.exe windows:4 windows x86 arch:x86

233d43c85d3e6d8c909589d1c7274413

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetCursor
LoadImageA
GetMessageA
DrawTextA

kernel32

SetEndOfFile
lstrcmpA
WriteFile
VirtualAlloc
TlsSetValue
EnterCriticalSection
EnumResourceLanguagesA
EnumResourceNamesA
GetModuleHandleA
GetStartupInfoA
LoadLibraryA
Sleep

ole32

CoInitializeSecurity
OleCreateLink
WriteClassStg
CoGetCurrentProcess

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

code
Size: 18KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE