57012d76eabc234fa54381404901b190N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

57012d76eabc234fa54381404901b190N
Size

97KB
MD5

57012d76eabc234fa54381404901b190
SHA1

83f8198c34774feb5a3c0b68476f29cf35f100a8
SHA256

76d802559ebd29f7b626615c6213a0abe1952f42c2281692e085f8304317f5c3
SHA512

889ef939be35c84e8c4f9d631dee3f31ba70939175d4797784a749d0e8f611712607c564962de7794d1f215e2299b78edc1ca28f1112ea2bc72ffa5585c0d7e8
SSDEEP

1536:yjzd3YSbwL3QyZfIld6cgDn/Ou2H8DybNWEjeAgwrNCQC+gXJG5i0U3ge1S:qdISbwLAyZnTaFNWEyChTC+MG5Gc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
57012d76eabc234fa54381404901b190N

Files

57012d76eabc234fa54381404901b190N
.exe windows:1 windows x86 arch:x86

4bdb94226eb8d2b42e6e70aaf7fe8c0f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ExitProcess
GetModuleHandleA

oleaut32

VariantChangeTypeEx

advapi32

RegSetValueExA

version

VerQueryValueA

gdi32

TextOutA

user32

UpdateWindow

wsock32

WSACleanup

Sections

pec1
Size: 44KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pec
Size: 1KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE