5ed6dcc588c4c127f94d22c1169fed08ebc156e19985b10578649327444a968c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5ed6dcc588c4c127f94d22c1169fed08ebc156e19985b10578649327444a968c
Size

13.2MB
MD5

36bc5c48407e8a10dab59eca10d0cfeb
SHA1

8d7a773c5abe331bb6ea4804c14177f2ca7f44d9
SHA256

5ed6dcc588c4c127f94d22c1169fed08ebc156e19985b10578649327444a968c
SHA512

9a85ac91176298d487cc8a26556b218ef17fb238d57d5b9875c4d2c093bd808eea0c9d9fa9510e001bb465744f3856a7d57796a74e3e7bd024a4e09d6dc630af
SSDEEP

196608:MqH76jQJKXKmnQfbxeavUm+xB/wKYXmwto5FjTFAl8bc5sbocuX4oxeOBDzNXuj:f7fJg1Qfbx1Uz5xTGlEc5sbjQreIX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ed6dcc588c4c127f94d22c1169fed08ebc156e19985b10578649327444a968c

Files

5ed6dcc588c4c127f94d22c1169fed08ebc156e19985b10578649327444a968c
.exe windows:5 windows x86 arch:x86

b0a5f9628e2b878bcd1b569837328c53

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA

user32

CreatePopupMenu

advapi32

RegRestoreKeyW

comctl32

ImageList_ReplaceIcon

Sections

DATA
Size: - Virtual size: 15.1MB

IMAGE_SCN_MEM_READ

.shared
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12.0MB - Virtual size: 12.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ctors
Size: 94KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE