e0544dbb66154179888ed420f2ad5040 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e0544dbb66154179888ed420f2ad5040
Size

141KB
MD5

e0544dbb66154179888ed420f2ad5040
SHA1

b1c21aab435651bf3f9f1f5a23f37a43f7d8d197
SHA256

e4393061682cf59681534277f79666745b90b7b8436dab9aaf7fcda988e0961d
SHA512

1d6d40ecfa0be79e64f9cad6196193c940ca23f5a0c76c75077216e37c73850d7206900e0a55d3bc7ce152be78ba03d78e10cf65f30124b728ca90797f184780
SSDEEP

3072:mwpXBWFKtKv9gQEWhGxfKLNrzN0IHIjHDIJZBoVGPgi3wMt4ilvSav53:cKG9gQEiG2+GIYZoVG4i3wMt4iX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e0544dbb66154179888ed420f2ad5040

Files

e0544dbb66154179888ed420f2ad5040
.exe windows:1 windows x86 arch:x86

a110531a87e9a90a0f8653b00a50f512

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

VariantChangeTypeEx

gdi32

UnrealizeObject

ole32

IsEqualGUID

comctl32

ImageList_SetIconSize

shell32

ShellExecuteA

Sections

CODE
Size: 125KB - Virtual size: 360KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE