5ab649f88184e9c7a56f33a1f144538a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5ab649f88184e9c7a56f33a1f144538a
Size

142KB
MD5

5ab649f88184e9c7a56f33a1f144538a
SHA1

66911dbdd6e06cbd43e83bf8faffccd37559def8
SHA256

52fb17d4ec1711f18df92494a865f9a48f089721f2742ce7ae7ca3bbb2fbeab8
SHA512

6486512a9301c2c39a4879e6f97446aa32f9602fe5a7370119060e6929bbfeee2445e9e8b755c824373fd12f217617e9ada03f345deb1726cfc7278165f69443
SSDEEP

3072:TbbI4VCi2Hg7rLz4tdP84CT9QrstAnlMxQk86NptPJ:Tbc4kNHgXL+PXOgwz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ab649f88184e9c7a56f33a1f144538a

Files

5ab649f88184e9c7a56f33a1f144538a
.exe windows:4 windows x86 arch:x86

28ad2b82a8bc1fac3fed27ef173cef70

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset
fabs
ceil
malloc
floor
free
fclose
memcpy
_CIexp
_CIpow
strlen

kernel32

GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
TlsAlloc
LoadLibraryA
GetProcAddress
FreeLibrary
GetVersionExA
HeapAlloc
HeapFree
HeapReAlloc

user32

CallWindowProcA
DestroyIcon
FillRect

gdi32

GetCurrentObject
GetTextAlign
GetTextColor
GetBkMode
GetBkColor
GetROP2
EndPage
StartPage
SelectObject
SetTextAlign
SetBkMode
SetBkColor
SetROP2
GetObjectType
DeleteObject
GetObjectA
CreateCompatibleDC
GetDIBits
DeleteDC
CreateDIBSection
BitBlt
CreateBitmap
SetPixel
GetStockObject

Sections

.code
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 184B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ