5f088da9fa4b0857c7ac90fa26d106c8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5f088da9fa4b0857c7ac90fa26d106c8
Size

45KB
MD5

5f088da9fa4b0857c7ac90fa26d106c8
SHA1

d291988e4443f921e9aabd5aa30fb4042305198e
SHA256

5fda487151b5f3a08918b1271c80237fcc57e6c254caded355705135e26dee4c
SHA512

20ff46e6da66949caeede75af6952a761c55211fde415d3d15257d59f17434e4dd1f1537c5d582ada862121bfc4ade214ad800f408c07f93788d9d9657551b53
SSDEEP

768:kwTVd/b99jhEhVftVEPd/aBB8riAvjHzRz3VQT1QzphY6ONzb6g99b7Hd:kKbz9nEhVfTEpaBBCtz3OT4puNz7B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5f088da9fa4b0857c7ac90fa26d106c8

Files

5f088da9fa4b0857c7ac90fa26d106c8
.exe windows:4 windows x86 arch:x86

29d4d9a4e535bff721362e89820bef9e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

shell32

SHGetSpecialFolderPathA

Sections

.text
Size: 40KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE