5781cfc1fae1e0e5d1afa9289e969491 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5781cfc1fae1e0e5d1afa9289e969491
Size

815KB
MD5

5781cfc1fae1e0e5d1afa9289e969491
SHA1

0a97337c373adbb03ef5acebb0aba35d791e135d
SHA256

f867cc142141f5f9cae3f2c6f8abd72f7511d7b75c9ae3d84ac46c6618418d97
SHA512

9e1862aa9208a00528e41db765ec0735d9e3be6f4a77429cb85dded141b577e3abcd964fc4d578af2f8f1a39f38e67382de091fd37811973266ae9e442d74699
SSDEEP

12288:pWOCqoXGdaj3kLzKDZ40usT2N7UjdNTWF3t9dGtQO/IcPVqCGOcRfB:d0Xj3kvRETG7UjrT69+p/IIVqK65

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5781cfc1fae1e0e5d1afa9289e969491

Files

5781cfc1fae1e0e5d1afa9289e969491
.exe windows:4 windows x86 arch:x86

39f33b20e3eb6ab028a8a9ff56d005b5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindClose
CreateFileA
ExitProcess
GetACP
GlobalLock
GlobalUnlock
GetLastError
Sleep
FindAtomA
CreateMutexA
LocalFree
GetConsoleCP
CreateFileMappingA
CloseHandle
GetModuleHandleA
LoadLibraryExW
HeapCreate
FreeEnvironmentStringsA
TlsGetValue
SignalObjectAndWait

user32

GetDlgItem
DispatchMessageA
GetFocus
GetDC
CopyRect
FillRect
DrawEdge
CallWindowProcA
CheckRadioButton
IsWindow
DrawFrame
DefWindowProcW
GetIconInfo
MessageBoxA

uxtheme

DrawThemeIcon
GetThemeRect
DrawThemeEdge
GetThemeSysInt
DrawThemeText

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ