44782e553022b62796af58a9cecccef3b5d0ac4b0591568b1b14d6cee2245a70 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

44782e553022b62796af58a9cecccef3b5d0ac4b0591568b1b14d6cee2245a70
Size

33KB
MD5

350732c172f83cee41e740f55f4b6244
SHA1

8bfffcef038b4895c3701b6085f2d88289267aa0
SHA256

44782e553022b62796af58a9cecccef3b5d0ac4b0591568b1b14d6cee2245a70
SHA512

84d729fbf5027fd3bb4cb9c39cfae82ce6fac4da70c39f088dea23d119c062e013224af604ab85d6c56a45175a2d2a3484f8dc5ccd40b66e2858d4422b0505db
SSDEEP

768:96Mk+n2tgfavrpDbusE3mS+GEhAfOQ1C9XvmUAKtvCzB:1OtgfavrptEIdAmQEwNKtv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44782e553022b62796af58a9cecccef3b5d0ac4b0591568b1b14d6cee2245a70

Files

44782e553022b62796af58a9cecccef3b5d0ac4b0591568b1b14d6cee2245a70
.exe windows:4 windows x86 arch:x86

4d3b77e424679faa0805d14d8814a023

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersion
GetFileAttributesA
GetLastError
RtlUnwind
HeapCreate
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
HeapValidate
ExitProcess
GetSystemTimeAsFileTime
GetStartupInfoA
GetFileType
GetStdHandle
GetCurrentProcess
DuplicateHandle
SetHandleCount
GetCommandLineA
GetModuleFileNameA
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
CreateProcessA
CloseHandle
WaitForSingleObject
GetExitCodeProcess
SetConsoleCtrlHandler
GetConsoleMode
GetConsoleOutputCP
WriteFile
MultiByteToWideChar
VirtualAlloc
VirtualQuery
SetStdHandle
WideCharToMultiByte
SetFilePointer
DeleteFileA

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE