54a57a5feb1cc119544593c4bc3a9bf0N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

54a57a5feb1cc119544593c4bc3a9bf0N
Size

29KB
MD5

54a57a5feb1cc119544593c4bc3a9bf0
SHA1

88023d2791e4eb535b03ffae9c4971598fb87b94
SHA256

4d4b60f19fdf16840b89cee2be5352e3118a46048c13f4ab26947fa793d53bbe
SHA512

065e6fbbd52cb26178dff176b4f71f19ce9ff68a162b3ee1ad6259f4b0d565f5c8d6562ab4696cd5a305363813b8644194d24c1e868d0593d31be3c539fbfd45
SSDEEP

384:MqvAXxH6zoHAcIWed4+kSLqrXla7vvxlLjl6VVVn:zWxMoHNed6a7DZs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
54a57a5feb1cc119544593c4bc3a9bf0N

Files

54a57a5feb1cc119544593c4bc3a9bf0N
.exe windows:4 windows x86 arch:x86

d3f16d0bb420f1ef31d9a1b904c27976

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

mfc42

ord823

msvcrt

exit

user32

wsprintfA

shell32

ShellExecuteA

shlwapi

SHDeleteKeyA

ws2_32

setsockopt

iphlpapi

GetIfTable

Sections

.MPRESS1
Size: 10KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE