05e6fc9000f42e469237735f7c9d971f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

05e6fc9000f42e469237735f7c9d971f
Size

86KB
MD5

05e6fc9000f42e469237735f7c9d971f
SHA1

c6119f11fdb65870b7fc0f8887f6c7f8d99cf77d
SHA256

e911128e76d30f1a258c8c6a3dbba53f271cad44a811a2a9682391d24f8debf8
SHA512

a2a5b42c7114642e4f5fd950cf915d0eae332d4081fdf70b7049554cd8018606f85a02ca6a197b631230b00a75bb4a94f75b91a237fb959b2bf305cb82ba8598
SSDEEP

1536:OWNcxaPauMMtpebGJoNJkF77Cg1dhcyS4LDpJ8u11KYHRMbc4LFeLfXe2AXZh4BR:pqxaPNFTRp77//Mu1+cWFe7Xe2IOBR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05e6fc9000f42e469237735f7c9d971f

Files

05e6fc9000f42e469237735f7c9d971f
.exe windows:4 windows x86 arch:x86

3345357651df079d1851b52e3e5424ef

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
GetModuleHandleA
LoadLibraryA

user32

DrawTextA
GetDC
GetWindow
EmptyClipboard
CreateWindowExA

gdi32

BitBlt
GetStockObject

oleaut32

GetErrorInfo
SetErrorInfo
SysAllocStringByteLen

msvcrt

__getmainargs
_controlfp
_except_handler3
__set_app_type
__p__fmode
strcmp
_exit
__p__commode
exit
_acmdln
_XcptFilter
_initterm
__setusermatherr
_adjust_fdiv

Sections

.text
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 796B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ