0516e450cc18b22c191a0ed090810b73 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0516e450cc18b22c191a0ed090810b73
Size

814KB
MD5

0516e450cc18b22c191a0ed090810b73
SHA1

5b35530134e25446253c423002dfccba522fb6c0
SHA256

13e1d2cdf6889d3df885b8437a6e9007f99ef25bdf58a7195c8e6fea6587dd4c
SHA512

03755837120ea43374e014e48c0759917f41dcc570bbf8938babf5834fe56d54b227c5d744f21bd3acd9fab562640b57fcc724c31ca9e2dc774a5220b444ad45
SSDEEP

12288:dvTnwtQDXGQPENwRLzCjHVJobHa5CEcBnmYKVfCh3AjjrvcCWVSeIhdQLpBO:dbkQDxcOpCx2bwOGYAjn7U5HBO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0516e450cc18b22c191a0ed090810b73

Files

0516e450cc18b22c191a0ed090810b73
.exe windows:4 windows x86 arch:x86

e5b13cdff7b39346190c692193faf3ab

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenEventA
GetStartupInfoA
GetEnvironmentVariableA
HeapCreate
FindClose
ExitProcess
WriteConsoleA
SuspendThread
HeapDestroy
SetLastError
GetModuleHandleA
GetVersion
lstrlenW
GetCommandLineW
Sleep
FindResourceExA
CreateSemaphoreW
CloseHandle
CloseHandle
DeleteFileA

user32

GetKeyState
CreateIcon
IsZoomed
PeekMessageA
DispatchMessageA
GetSysColor
CallWindowProcW
SetFocus
DrawTextW
GetWindowLongA
GetClassInfoA
FindWindowA
DispatchMessageA

docprop

DllGetClassObject
DllGetClassObject
DllGetClassObject
DllGetClassObject

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 806KB - Virtual size: 805KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ