5a617c41d0cec1028963142c83ce69b7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5a617c41d0cec1028963142c83ce69b7
Size

424KB
MD5

5a617c41d0cec1028963142c83ce69b7
SHA1

e9d42213e1ecbd09727715a8192ec8bfb2847028
SHA256

7b9993a5c47976a583d4aac6b5dd30ec14c64648bc3cd3f2988389ef18af28a0
SHA512

0c88fc353c9d0c798c605a076e910f72d2c215ba0fabc53aa1545c0c46ab97075d7b86f5143b08ec02a17c184ab2dfc1f45019c993b0af32412f4eebed57e1e7
SSDEEP

12288:j6h5mf3I2iwDzgn3Y5h6sriJdEI2T1AUXnU0W:uXa3Kw/gnShkv617XnlW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a617c41d0cec1028963142c83ce69b7

Files

5a617c41d0cec1028963142c83ce69b7
.exe windows:4 windows x86 arch:x86

e2381a37ca439dec9547277017c3cd4e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStdHandle
VirtualProtect
GetLocaleInfoA
SetEvent
ResetEvent
CloseHandle
LoadLibraryExA
GetSystemDirectoryA
ReleaseMutex
Sleep
EnterCriticalSection
InterlockedExchange
SetErrorMode
RaiseException
GetACP
GetLogicalDrives
FindFirstFileExA
GlobalFree
GetLastError
GetCommandLineA
HeapCreate

user32

SetForegroundWindow
ReleaseDC
FillRect
ShowWindow
DrawTextA
IsIconic
GetActiveWindow
GetFocus
wsprintfA
EndPaint
GetParent
ValidateRect
BeginPaint
FlashWindowEx
GetCursorPos
GetWindow
GetWindowTextA
FrameRect
GetClassNameA

dsound

DllGetClassObject
GetDeviceID
DirectSoundCreate
DirectSoundEnumerateA
DirectSoundCaptureCreate

clbcatq

CoRegCleanup

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 696KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ