5372010575af740380abd76d91b006e9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5372010575af740380abd76d91b006e9
Size

36KB
MD5

5372010575af740380abd76d91b006e9
SHA1

0ae980863b1f2b9f30d5df08116b64d6ec3ca227
SHA256

e81ce6bc3633616d05c182f65ed31fa7994657809cfde415edaae799bc99432f
SHA512

ef180d1b82ae05a26f6c12d3fa4fa6909d030bc8eb1b602ddd15cf5e59d93a09e40950baf2577b139a45e72c4953c04b0f4850a9c7fe22efc44ffbcc35b9906c
SSDEEP

384:lnki9QZTLMOCBVJjslX87Iit5tpI0y9+v/O25XH6o4u8:2i9QdLM5ql6BRBu2NH6o4u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5372010575af740380abd76d91b006e9

Files

5372010575af740380abd76d91b006e9
.exe windows:4 windows x86 arch:x86

9351dedf7aa84bfcbe34f5acd4e39b65

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetEnvironmentVariableA
lstrcmpA
lstrcatA
GetPrivateProfileStringA
FreeEnvironmentStringsW
SetHandleCount
GetEnvironmentStringsW
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
ExitProcess
TerminateProcess
GetCurrentProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
GetLastError
WideCharToMultiByte
GetEnvironmentStrings
VirtualAlloc
HeapReAlloc
GetStdHandle
GetFileType
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc

user32

wsprintfA
CreateWindowExA
DefWindowProcA
LoadIconA
LoadCursorA
RegisterClassA
MessageBoxA

gdi32

GetStockObject

shell32

ShellExecuteA

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE