5b66e1665f8d75110ef1df1ab01fecc65a79813f150f2900e54bba6e5722d609 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5b66e1665f8d75110ef1df1ab01fecc65a79813f150f2900e54bba6e5722d609
Size

14.0MB
MD5

087646302b5098c16a44055fa5df54f0
SHA1

76fef4b71d84989b5711ad94078be46bcabd5784
SHA256

5b66e1665f8d75110ef1df1ab01fecc65a79813f150f2900e54bba6e5722d609
SHA512

e315b688f7cdf28a75a709e968a48a35519ace5612b4da4d6a9759e2edb7ea86b9987981046f973e0859e262faaedb0fce0dd556f8cba831b676c1626d00644c
SSDEEP

393216:6UomCtHeQM57uyPeq6W7zdqSLz6Pt3NUwFc/mQb:AtHeQMZuEF6kzdqSaPt3Xc/mU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b66e1665f8d75110ef1df1ab01fecc65a79813f150f2900e54bba6e5722d609

Files

5b66e1665f8d75110ef1df1ab01fecc65a79813f150f2900e54bba6e5722d609
.exe windows:5 windows x86

f90b3b8b491c48ca1f8e4661251dc515

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

LoadStringA

gdi32

SetViewportOrgEx

winmm

midiStreamRestart

winspool.drv

ClosePrinter

comdlg32

GetOpenFileNameA

advapi32

RegCreateKeyExA

shell32

Shell_NotifyIconA

ole32

CoTaskMemFree

oleaut32

VariantTimeToSystemTime

comctl32

ImageList_ReplaceIcon

oledlg

ord8

ws2_32

recv

Sections

.text
Size: 4.6MB - Virtual size: 25.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 38KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE