5b06f517388901984b21c503cbd60e61 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5b06f517388901984b21c503cbd60e61
Size

298KB
MD5

5b06f517388901984b21c503cbd60e61
SHA1

24269f71203ebef2374e0e486163c7ce2e6496e4
SHA256

32f97e7621c9856f7e96bedeef798e27ff73b1a8a1793a3fee23aea61b74d643
SHA512

5e0e981d148b8cee289528184b44949d3293796aa05b760af47c6b7acebe6048bcfeb6b5127abbb0c1ed0a9c5d64bf6200748c48230b504bbef15df5f9071573
SSDEEP

6144:BQ+0nJVKiaU2YUCd6Ayzgw+FCpVG0AodrtLfnHtI4Ebocs:InJVKi32ZJAyzb+oLJz9S4EFs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b06f517388901984b21c503cbd60e61

Files

5b06f517388901984b21c503cbd60e61
.exe windows:4 windows x86 arch:x86

ded192ba2c5895e84420e664c926a2bf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ResumeThread
CreateEventW
GetEnvironmentVariableW
InitializeCriticalSection
LocalFlags
GetCurrentThreadId
GetCurrentProcessId
LocalFree
FindClose
FindAtomA
LoadLibraryW
TlsGetValue
lstrlenW
ReadFile
GetNumberFormatA
GetConsoleAliasA
SuspendThread
GetDriveTypeW
GetPrivateProfileStringA
HeapCreate

user32

DrawTextA
SetFocus
DispatchMessageA
CallWindowProcW
DrawStateW
EndDialog
GetSysColor
IsWindow
GetKeyboardType
GetClassInfoA
GetSysColor
GetClientRect
CreateWindowExA

srclient

EnableSR
EnableSR
EnableSR
EnableSR
EnableSR

clbcatq

DllGetClassObject

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 424KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 288KB - Virtual size: 287KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ