1d5dc399055f771290dc9b7c630042a0 | Triage

Sharing

General

Target

1d5dc399055f771290dc9b7c630042a0
Size

160KB
MD5

1d5dc399055f771290dc9b7c630042a0
SHA1

65fb980fe50d477cdefac14704800cfaf08aa789
SHA256

38b68a9e074c519ea38199a824efe32745c3c27bc2cedfe4bd7b5dd654838526
SHA512

1c5d571c5ce68e1ce587b1475cb6adb0dd2c2f68a4b9051d96424670f704af9f8cdcdafa43f03e6458e2e711462e203ef66a7004f84b99ceb41cd8d3e5dd7db0
SSDEEP

3072:iVouj2qgu7klbJBJ5ByuC/xUBf1OXZa6rOX5kMPOxylt:iVRj2hLlTJDr6pTr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1d5dc399055f771290dc9b7c630042a0

Files

1d5dc399055f771290dc9b7c630042a0
.exe windows:5 windows x86 arch:x86

cb2f54bd6f3c4b2e1669e2bd24537e1c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetCommandLineW
GetCurrentThread
GetLastError
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetVersion
HeapAlloc
HeapFree
InterlockedExchange
FreeLibrary
LocalAlloc
LocalFree
MultiByteToWideChar
RaiseException
SetCurrentDirectoryA
SetErrorMode
SetThreadPriority
lstrcatA
lstrcpyA
lstrlenA
lstrlenW
VirtualAlloc
FormatMessageA
ExitProcess
CreateMutexA
CompareStringA
LoadLibraryA
CloseHandle

user32

IsIconic
IsWindowVisible
MessageBoxA
SendMessageTimeoutA
SetForegroundWindow
ShowWindow
LoadIconA
LoadCursorA
LoadCursorW
LoadIconW
GetWindow
GetParent
GetDesktopWindow
GetClassNameA
FindWindowA
GetWindowThreadProcessId

gdi32

GetStockObject

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 136KB - Virtual size: 135KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ