d44c4b40faba4c2c3865618759d217f8 | Triage

Sharing

General

Target

d44c4b40faba4c2c3865618759d217f8
Size

57KB
MD5

d44c4b40faba4c2c3865618759d217f8
SHA1

bea6d838464a5670a42ddb2053ce7e79666356fa
SHA256

5dccf9d6f82f12aa1c190d9a37fb315ccb775a55a851d05312e0229c5148ca89
SHA512

2ff51a743dd8598d5132e68fdce82f975493df7a5da79b4d60eadce0d1ab28e43d8b58b48c5a186cba8b7c134632c07873206bd1d23abf8c429ca6639e18173c
SSDEEP

1536:IxrZ6UzID3tbS8J3zqXRGXDT6CxAj2KKKZr5Is4:uNzI4A9zrAC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d44c4b40faba4c2c3865618759d217f8

Files

d44c4b40faba4c2c3865618759d217f8
.exe windows:4 windows x86 arch:x86

233d43c85d3e6d8c909589d1c7274413

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetCursor
LoadImageA
GetMessageA
DrawTextA

kernel32

SetEndOfFile
lstrcmpA
WriteFile
VirtualAlloc
TlsSetValue
EnterCriticalSection
EnumResourceLanguagesA
EnumResourceNamesA
GetModuleHandleA
GetStartupInfoA
LoadLibraryA
Sleep

ole32

CoInitializeSecurity
OleCreateLink
WriteClassStg
CoGetCurrentProcess

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

code
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE