5b80a14bfdbd2e51c616c673f588058a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5b80a14bfdbd2e51c616c673f588058a
Size

538KB
MD5

5b80a14bfdbd2e51c616c673f588058a
SHA1

6e16bbcf3da4b4604c5a95414587cb4f19fddd8c
SHA256

24b3c8520ad381884ee93a4ec219f4735e00ec6c35e897a61ff1c401e4f4b097
SHA512

17ce1b78ddc5256f506ba16c7f59ffd6921626f85d884f23a779e4a2cfb2e60a3b93be3d8b0900a13f85c531498efe736a0ca727baf5d739f2aa334665e8ae09
SSDEEP

12288:aM4vdq1kwjdewDd9TLCQVfFkPR1jRn3DKifr1CajlZPNv7+y/SRi:CvdqawrDdlWydyRL3DFfNTTSR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b80a14bfdbd2e51c616c673f588058a

Files

5b80a14bfdbd2e51c616c673f588058a
.exe windows:4 windows x86 arch:x86

a83ac250ba95ef84d499b749b553e2c7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

advapi32

RegQueryValueExA

comctl32

ImageList_SetIconSize

comdlg32

GetSaveFileNameA

gdi32

UnrealizeObject

oleaut32

SafeArrayPtrOfIndex

user32

WindowFromPoint

version

VerQueryValueA

Sections

CODE
Size: 501KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE