5a7fc6f1259a278a92015f35fdb0addc | Triage

Sharing

General

Target

5a7fc6f1259a278a92015f35fdb0addc
Size

391KB
MD5

5a7fc6f1259a278a92015f35fdb0addc
SHA1

2c6ccda5ed6155fb3fff20ef2662d0eda717b959
SHA256

c26744705507c284cc40b0fad41d4a751b859f4e45ff366a57cb03f32613e430
SHA512

f2a8915e1225833192a340dc746fa091ef257120d05725c866fbcdf601a2cca08165477d4f75be5f5f1884b9dfbba52161a37b5c9a4cf11140289104de8cf696
SSDEEP

6144:T1hKi6StM9w1olH4Ox/jNRcOpFkAdxAhkoVu3fmR650MQoVr63x:Tqi6UO40jrcMFkyxVau3f91QE6h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a7fc6f1259a278a92015f35fdb0addc

Files

5a7fc6f1259a278a92015f35fdb0addc
.exe windows:5022 windows x86 arch:x86

79e1f9850bf2925d67b37451ea35e1b9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

SelectObject
StretchBlt
LineTo
PatBlt
LineTo
CreateCompatibleDC

user32

GetWindow
SetWindowPos
SetTimer
SetWindowTextW
SendDlgItemMessageW
wsprintfW
ScreenToClient
UpdateWindow
GetFocus
SetWindowLongW
PostMessageW

kernel32

MultiByteToWideChar
ExitProcess
FormatMessageW
Sleep
VirtualFree
InitializeCriticalSection
GetTickCount
SetEvent
GetCommandLineA
VirtualAlloc
LoadLibraryW

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 372KB - Virtual size: 412KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ