d54606ee37d5b485525e6491e188d5fa | Triage

Sharing

General

Target

d54606ee37d5b485525e6491e188d5fa
Size

348KB
MD5

d54606ee37d5b485525e6491e188d5fa
SHA1

26bfeeecf913fa14ea46ffa4fd61a0f307b37011
SHA256

14fd1d18fb353cc839d4dde0e042d8db805c5c941b9d308bc4032d84df5cfb4b
SHA512

d8c15391450dcd123d92999ddacfbbcdd71b4e259fd4125ea148d5d6c8cd5ea381876e734d033ca46053fd1b5f2cc89d42919098aff6b27c1978c9dc65719127
SSDEEP

6144:rNLFpePXQ8YQsA3XQ/lty+hZvu++njEgd4G1AmCeHjkhbMg/8U7o:hjePgbQjw/ZS3aoCgebMB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d54606ee37d5b485525e6491e188d5fa

Files

d54606ee37d5b485525e6491e188d5fa
.exe windows:4 windows x86 arch:x86

850cd4c5787e5d9e29ac5da5b4f673a0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileW
UnmapViewOfFile
lstrlenA
GlobalFree
HeapCreate
lstrcpyA
GetExitCodeProcess
FindResourceW
GetModuleHandleA
SetLastError
GlobalUnlock
GetCurrentThreadId
GetStdHandle
TlsGetValue
GetProcessHeap
GetEnvironmentVariableA
CreateProcessA
CloseHandle
PulseEvent
LoadLibraryExW

user32

GetDlgItem
CheckRadioButton
DrawEdge
FillRect
DrawMenuBar
CreateWindowExA
GetCaretPos
DispatchMessageA
CallWindowProcA
SetFocus
IsWindow
GetDC
CreateIcon

rsaenh

CPSignHash
CPHashData
CPGenKey
CPDeriveKey
CPDecrypt

msasn1

ASN1BERDecEoid

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 312KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 271KB - Virtual size: 272KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ