f5f420c7ab807e497b66418b05cb0a8d065cc11c1aa155ce48c93afaf30f4841 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f5f420c7ab807e497b66418b05cb0a8d065cc11c1aa155ce48c93afaf30f4841
Size

1.8MB
MD5

5279586b9ed944f746e64d0d5bf82e72
SHA1

4e245c0191448d75a927b2107c5864c1f5542b2c
SHA256

f5f420c7ab807e497b66418b05cb0a8d065cc11c1aa155ce48c93afaf30f4841
SHA512

07351bddd868d4f96262fbd8c7a67950240979e7c84a31959b5379ccc4b543d3e542b8f85b9e779f57242f608cf3269c73d1c23719d42730b299df24b563a2cd
SSDEEP

49152:c4dXEMLX0CRXT6nv5j6rOmxz5nMZIy8aEWzqV08rL:cyXEyEcenv5j6rOmxGZ3fEcn6L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5f420c7ab807e497b66418b05cb0a8d065cc11c1aa155ce48c93afaf30f4841

Files

f5f420c7ab807e497b66418b05cb0a8d065cc11c1aa155ce48c93afaf30f4841
.exe windows:4 windows x86

f87a502da3f755d8a165221292b500d4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_GetIconSize

ws2_32

WSAGetLastError

shlwapi

SHRegGetUSValueW

kernel32

QueryPerformanceCounter

user32

SetCursor

gdi32

StretchDIBits

comdlg32

CommDlgExtendedError

advapi32

RegisterServiceCtrlHandlerW

shell32

DragFinish

ole32

CoTaskMemFree

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

Sections

.text
Size: 730KB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ