53b49d060e4d6f3029e53635bfbd7b161c041b975b6efa1142c1fe231d952192 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

53b49d060e4d6f3029e53635bfbd7b161c041b975b6efa1142c1fe231d952192
Size

101KB
MD5

434a67828492c78268b0773441462366
SHA1

de81c4a90b1addc6f7100fefe37fa7d3832fc4b7
SHA256

53b49d060e4d6f3029e53635bfbd7b161c041b975b6efa1142c1fe231d952192
SHA512

80c8f3ad27316a91fcc041e3b27a692b9e0d775526d3af987e301ecfb3d8c3445060c50075e994021d1ec80fe8c4ab9c40a0523dd576d316112cfd606d3043e9
SSDEEP

1536:QjDkMsvMd0C6pzdZYQFN9Zr96sTBWFSxAyS5lyv9Rw4Fzh/oLVBTq:M4MJ0C6zPz3Mrq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
53b49d060e4d6f3029e53635bfbd7b161c041b975b6efa1142c1fe231d952192

Files

53b49d060e4d6f3029e53635bfbd7b161c041b975b6efa1142c1fe231d952192
.exe .js windows:4 windows x86 arch:x86 polyglot

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 94KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ