5320123e22c3a4969b3e4181d105ff38 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5320123e22c3a4969b3e4181d105ff38
Size

17KB
MD5

5320123e22c3a4969b3e4181d105ff38
SHA1

544dbd651bd02cafc7198ca6c310e6986efb1add
SHA256

106172f9c35150379abe2370a89567f56808a4c3ff52596cb1e22e46d83c43a9
SHA512

3d100e4d4b1e5563b8868cc6e5c6ef37cf7150da8347f6790b0fd73fba1493c2b5d37aa41f1f2e8d9cb6c45c615fb0458de04411ce3e677a34bd9c296ed7036b
SSDEEP

192:CvYx43O1Aqt4+OD1Xxuh1B7NDOvoRw1l259+svAwMJl5HRgOX90qeiv4EQnB0/0:143OeI4rxBuLWB1Y8sFQMg9/gEHs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5320123e22c3a4969b3e4181d105ff38

Files

5320123e22c3a4969b3e4181d105ff38
.exe windows:5 windows x86 arch:x86

fa8560b3dd08ee001893e0edd10c4665

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
UnhandledExceptionFilter
RtlUnwind
SetUnhandledExceptionFilter
ExitProcess
GetWindowsDirectoryA
lstrcatA
CreateFileA
VirtualAlloc
GetProcessHeap
TerminateProcess
IsDebuggerPresent

user32

TranslateAcceleratorW
LoadCursorW
GetDlgItemTextW
EnableMenuItem
DefWindowProcW
UnhookWindowsHookEx

comdlg32

GetOpenFileNameW
FindTextW
CommDlgExtendedError
GetSaveFileNameW
PrintDlgW
ChooseFontW

advapi32

RegOpenKeyExA

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ