5157eae92da64095d6edd683691c1f3c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5157eae92da64095d6edd683691c1f3c
Size

65KB
MD5

5157eae92da64095d6edd683691c1f3c
SHA1

4cb27b8e6ccc20e2ffbc82f5bd15f7b88b3ee1d0
SHA256

7c35098002b34016011a3081f203a5a2a399cce01cff9d106dfc40c650931788
SHA512

3544ad24cd34a8c642ab65509c181024faa729807272c3b647e5dbb8268561a8b807b5985369f2b69c5281ee242e31ba8a5362f8d72c3a15f7d14d75564985f8
SSDEEP

768:sOEPrZDnZh/TswD8sU5vLMu7PAiRKZ20u1tgfix1++++Tz8E/P406EMCAQbcS:sOEVX9D8sMMOPAoKu/a4Vb/wCMCv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5157eae92da64095d6edd683691c1f3c

Files

5157eae92da64095d6edd683691c1f3c
.exe windows:4 windows x86 arch:x86

3cd4b279d66e77002eb372b38bee5f87

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
PulseEvent
SetLastError
UnmapViewOfFile
FindResourceW
GetCommandLineA
GlobalUnlock
HeapCreate
FindClose
lstrlenA
CreateFileW
CreateProcessA
LocalFree
GetCurrentDirectoryA
lstrcpyA
CloseHandle
LoadLibraryExW
GetComputerNameA
GetCurrentThreadId
Sleep

user32

FillRect
GetDlgItem
GetDC
GetCaretPos
CheckRadioButton
CreateIcon
CallWindowProcA
DrawEdge
DrawMenuBar
SetFocus
DispatchMessageA
CreateWindowExA
IsWindow

rsaenh

CPDecrypt
CPGenKey
CPSignHash
CPDeriveKey
CPHashData

msasn1

ASN1BERDecEoid

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 50KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE