45aeef82f3d09d56ce652983453fac61 | Triage

Sharing

General

Target

45aeef82f3d09d56ce652983453fac61
Size

145KB
MD5

45aeef82f3d09d56ce652983453fac61
SHA1

8d50dc7f6a16868977b81dfc9655f9a6446ef0b9
SHA256

4a1f3e5fabe7bf7565a7140b0533e54dca813011ab8b9d919c228c669a88dadf
SHA512

d56dd71882aece36575b389408505a6648985084ba935345404d29731431b1c2851f22a2edc7b112c9ad5a29469d2a4f9f448c588149153b1665d7b534821093
SSDEEP

3072:ywoo1becnWzsDLidFY6/otFJEd/jCxRZaLWHLrMOrFIunsJFl3J3:yjo0m/LO+6SFmdbCxR0CHLrrrFIunY3t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45aeef82f3d09d56ce652983453fac61

Files

45aeef82f3d09d56ce652983453fac61
.exe windows:1 windows x86 arch:x86

041d8efbdc4cdaae253f4a3c7918b192

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

iphlpapi

GetAdaptersInfo

kernel32

GetModuleHandleA
GetProcAddress
CloseHandle
GetTickCount
RtlUnwind
WriteFile
GetLastError
CreateFileA
GetStdHandle
GetModuleFileNameA
MultiByteToWideChar
GetFileType
HeapFree
LoadLibraryA
GetLocaleInfoA
FreeLibrary
GetProcessHeap
HeapAlloc
FormatMessageA
SystemTimeToFileTime
lstrcmpiA

crtdll

__GetMainArgs
exit
raise
signal

pdh

PdhCloseLog
PdhAddCounterW

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey
GetSidLengthRequired
RegSetValueExA
RegCreateKeyExA

user32

LoadStringA

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 130KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 340B - Virtual size: 340B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ