58001920750d627531db5f8586ee252b | Triage

Sharing

General

Target

58001920750d627531db5f8586ee252b
Size

415KB
MD5

58001920750d627531db5f8586ee252b
SHA1

5a069d9fb01e6beda47e221f2ac81867a7cacc9e
SHA256

e5cf8a8bba9a9181f116570da6597c14cccf86c78f9940463fdc758d5e4bd71d
SHA512

c94fbe30b84e0c2eb4e6a1325871737ac528737f92a5ff9088db13a94d6a45c9413a48e8aae2556d7da0295d1c5749dc6bdf558dd982a183644a8bf5d9b674a3
SSDEEP

6144:t6b2I7dBJY+l8EAnddMJfnDnDYiktjAg2SDj2uqLUITtjtz:t6qIprYLsr0iktjrpDSFJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
58001920750d627531db5f8586ee252b

Files

58001920750d627531db5f8586ee252b
.exe windows:4 windows x86 arch:x86

7bb56ed74b1a08770ee30645bf2f307f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LockResource
GlobalAddAtomA
HeapCreate
Sleep
GetLogicalDrives
RaiseException
GetFileAttributesExA
SetErrorMode
GetSystemDirectoryA
GlobalFree
GlobalAddAtomA
LoadLibraryExA
EnterCriticalSection
GetACP
GetCommandLineA
GetLocaleInfoA
VirtualProtect
GetStdHandle
CloseHandle
GetLastError
InterlockedExchange

user32

GetWindowTextA
GetActiveWindow
EndPaint
IsIconic
ShowWindow
SetForegroundWindow
BeginPaint
GetFocus
FillRect
wsprintfA
GetClassNameA
ReleaseDC
DrawTextA
FrameRect
GetWindow
GetParent
FlashWindowEx
ValidateRect
GetCursorPos

httpapi

HttpAddFragmentToCache
HttpAddUrl
HttpCreateHttpHandle
HttpTerminate
HttpInitialize

winhttp

WinHttpOpen

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 696KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ