5b5974165cdc5b203ae4282df75965af

General

Target

5b5974165cdc5b203ae4282df75965af
Size

96KB
MD5

5b5974165cdc5b203ae4282df75965af
SHA1

fffb0445c8ca5b7a070b3f97b3842c0d18fde298
SHA256

e4dfcdc7bbfe3a575adff0fe2bf02e629838cc5d095bd36897f9927c50214c05
SHA512

bfce9c3365d40ed8986aa0331c0f4353d36aa5c8a487a60e64549a8b749e74aacac3e299fb4b7be993681891a1498ec752da99a5aafaa3cfec86f776c1263926
SSDEEP

1536:94JbZlTMWTZM/O6pOGrQ6r2zvLvXDmGdTsvZwQo6j01lUkhv/egYitUSb/8zS:94vprcEGrQ6SvnI/7i6k7Yit8S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b5974165cdc5b203ae4282df75965af

Files

5b5974165cdc5b203ae4282df75965af
.dll windows:4 windows x86 arch:x86

e8661eae6fe5115f36b57a245b13668a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

BuildCommDCBA
CloseHandle
ExitProcess
FreeUserPhysicalPages
GetACP
GetCommandLineA
GetCompressedFileSizeW
GetFileAttributesA
GetFileAttributesExW
GetModuleHandleA
GetNumberFormatA
GetProcessPriorityBoost
GetStartupInfoA
GetSystemTimeAsFileTime
GetThreadPriority
GetVersionExA
GlobalSize
HeapAlloc
HeapCreate
SetThreadIdealProcessor
WritePrivateProfileSectionW
_lopen

user32

SetUserObjectSecurity
RemoveMenu
EnableMenuItem
InflateRect
GetDoubleClickTime
EmptyClipboard
DrawMenuBar
LoadIconA

comctl32

ImageList_BeginDrag

ole32

CreateAntiMoniker
CoCreateInstance
CLSIDFromString

dbghelp

SymSetSearchPath
SymRegisterCallback
SymGetLinePrev64
UnDecorateSymbolName
dbghelp
ImageRvaToSection
SymGetLineFromAddr64
SymFunctionTableAccess
SymFromName
MakeSureDirectoryPathExists
DbgHelpCreateUserDumpW
FindFileInPath
ImageDirectoryEntryToDataEx
ImagehlpApiVersionEx

oleaut32

OleLoadPicture
ClearCustData

Sections

.text
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e8661eae6fe5115f36b57a245b13668a

Headers

File Characteristics

Imports

kernel32

user32

comctl32

ole32

dbghelp

oleaut32

Sections

.text Size: 56KB - Virtual size: 55KB

.data Size: 28KB - Virtual size: 27KB

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 56KB - Virtual size: 55KB

.data
Size: 28KB - Virtual size: 27KB

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 4KB - Virtual size: 3KB