5b74d72554595dcd3a47edf4afe9594c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5b74d72554595dcd3a47edf4afe9594c
Size

178KB
MD5

5b74d72554595dcd3a47edf4afe9594c
SHA1

af182d695522b8f47586fb22bc377a36d7748582
SHA256

e6f807330c5ad27c9e2e301c03b65698de27aed12a810d6ebcbe29a8652aa84d
SHA512

32a8d0789d552abf49c9d7e9aa4e4538938e1f01245f54164d0ea2cf60da6f1e0326c6af50f55de4b4fbbb95221976bc39885642a9e78f190404a0abc5b5f61c
SSDEEP

3072:uvOubM/Ig+0u43dcNdDllDCLs1aiOYofZZR5tiQbAdNVzykKxRSZzPW:k6IGu6dcNdDlEEsZZzZMdNVzkRyW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b74d72554595dcd3a47edf4afe9594c

Files

5b74d72554595dcd3a47edf4afe9594c
.exe windows:4 windows x86 arch:x86

00d8005c8ba7a31b927151e2692eefae

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetKeyState
CharNextA
GetClassLongA
CharLowerA

kernel32

GetThreadPriority
GetProcAddress
TransmitCommChar
InterlockedDecrement
EnumResourceNamesW
ExitProcess
FreeLibrary
LoadLibraryA
LoadLibraryW
InterlockedIncrement

msimg32

AlphaBlend
TransparentBlt

advapi32

RegCreateKeyExA
RegCloseKey
RegQueryValueExA

Sections

.text
Size: 154KB - Virtual size: 153KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 664B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 216KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ