5499020cf3aff15b44db415e74dde01f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5499020cf3aff15b44db415e74dde01f
Size

18KB
MD5

5499020cf3aff15b44db415e74dde01f
SHA1

b90c17317748cc3bb26f250a0cd74654a96093a9
SHA256

50edf00463b1b070e922ed44031f5bfdec23ce88883be8cc462ae68e7325c975
SHA512

07b6c497c2c46a7fdebd6389f1179fd8083cc8d6c2eee51b9ccfda4018d1c3bc7c1e4f4457e2eb382edc4a4ad92737391ebbab9e29544275cb00d3737b5108b7
SSDEEP

192:9xA2FkDeQCYFVVdDheNj1Cdrc3/NEl0Q8Q//PAO7Vi7VP1cuWuINoNoPzML:rAxCY1d+j1V3ilt//oSyVWuPFNoPzML

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5499020cf3aff15b44db415e74dde01f

Files

5499020cf3aff15b44db415e74dde01f
.exe windows:4 windows x86 arch:x86

3d2757a91e57568412c41561e850461a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
lstrlenW
GetProcessHeap
FindResourceA
ReleaseMutex
GlobalFree
GetEnvironmentVariableA
GlobalUnlock
CloseHandle
GetExitCodeProcess
DeleteAtom
LoadLibraryExW
SetLastError
HeapCreate
TlsGetValue
TlsAlloc
GetStdHandle
CreateMutexA
CreateFileA
GetModuleHandleA

user32

DrawEdge
IsWindow
FillRect
CreateMenu
GetCaretPos
DispatchMessageA
DrawMenuBar
GetDlgItem
CheckRadioButton
GetDC
CreateWindowExA
SetFocus
CallWindowProcA

ntshrui

GetLocalPathFromNetResourceA
GetNetResourceFromLocalPathA
IsPathSharedA
IsPathSharedW
SetFolderPermissionsForSharing

msasn1

ASN1BERDecEoid

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

jtyrsvt
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE