057c61cf4e7d03e87eec943d25d2a49e24a4ea99fa7aaffe60f2c2ff88faefba | Triage

Sharing

Copy URL Twitter E-mail

General

Target

057c61cf4e7d03e87eec943d25d2a49e24a4ea99fa7aaffe60f2c2ff88faefba
Size

143KB
MD5

97061c6de0c373918ea7efcf332d7b0a
SHA1

8d95dd0865f5ca5a4643fce7e7f8eb24fbcf2820
SHA256

057c61cf4e7d03e87eec943d25d2a49e24a4ea99fa7aaffe60f2c2ff88faefba
SHA512

5d36fcc8ffafa344ba555bc62d8516f91c4412dcb66198d98fa1dc49002ca1fb9ce2090a90bf756f81d412aeff325bbae1861c5f75457c4383a1ec45678e2952
SSDEEP

3072:40XR8xRsvRLn67vfjbeGELuyEdjayDiCJourmAi:4CRSsF67vJJlZmAi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
057c61cf4e7d03e87eec943d25d2a49e24a4ea99fa7aaffe60f2c2ff88faefba

Files

057c61cf4e7d03e87eec943d25d2a49e24a4ea99fa7aaffe60f2c2ff88faefba
.exe windows:1 windows x86 arch:x86

507ebb8311897a6f6061b61ffc92d268

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

iphlpapi

GetAdaptersInfo

kernel32

GetModuleHandleA
GetProcAddress
CloseHandle
RtlUnwind
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetLastError
GetCommandLineA
lstrlenA
CreateFileA
GetVersionExA
GetModuleFileNameA
MultiByteToWideChar
GetSystemDirectoryA
HeapFree

crtdll

__GetMainArgs
exit
raise
signal

ole32

CoGetClassObject
CoCreateInstance

advapi32

RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
RegCloseKey

user32

SetTimer
KillTimer
LoadStringA
DefWindowProcA
PostMessageA

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 128KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 334B - Virtual size: 334B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ