5b96d6368bf6fdbadd6e6f67b23fc1cf | Triage

Sharing

General

Target

5b96d6368bf6fdbadd6e6f67b23fc1cf
Size

393KB
MD5

5b96d6368bf6fdbadd6e6f67b23fc1cf
SHA1

6c4bba16eeb19a3e5ea1818d17a794f6ae45453c
SHA256

ec4b59a754b608284186c75ba7ac78e4217025b9727dcc6cc6c90080514454c5
SHA512

f87debfb26d6a553eb071264c67817f0e6398be96ed9e6929e0ebb509cb01ecc348960299c2ffc2d8d7a0822864ad1c71a334a92ce56bfcbf3cafd5f9ef201cb
SSDEEP

6144:sC1rUeNULfjGQXr8sQwJ8RdCCKoryzWz0cSxhIC/aulYcJeNsrFS/Zt3Zu73sDVo:trvULyjQorymC/aWYuosit3ZasV8P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b96d6368bf6fdbadd6e6f67b23fc1cf

Files

5b96d6368bf6fdbadd6e6f67b23fc1cf
.exe windows:4 windows x86 arch:x86

7b50a6c74e07e3d2dc87f58ed2a13833

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleCP
TlsGetValue
GetModuleHandleA
FindClose
WaitForMultipleObjects
CloseHandle
GetConsoleAliasW
LocalLock
GetACP
GetLastError
FindAtomA
Sleep
GlobalUnlock
LocalFree
HeapCreate
FreeEnvironmentStringsA
LoadLibraryExA
CreateFileMappingA
CreateFileA
GetCalendarInfoA

user32

SetFocus
GetIconInfo
GetDC
DrawEdge
DispatchMessageA
DefWindowProcW
IsWindow
GetDlgItem
DrawTextA
CopyRect
CallWindowProcA
CheckRadioButton
FillRect
MessageBoxA

setupapi

SetupCloseLog
CMP_Report_LogOn
SetupCloseInfFile
CM_Add_Range
CM_Add_IDA

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ