5f0f7fb80093bc44a2cae8590963663a | Triage

Sharing

General

Target

5f0f7fb80093bc44a2cae8590963663a
Size

100KB
MD5

5f0f7fb80093bc44a2cae8590963663a
SHA1

87ae938fc058485583d0586abcca69f3f3499f12
SHA256

8f72cca645961f3b7ed5c0181872e4d9761afc671337155efe7688b5f17c5804
SHA512

0006de38c3594817a3009170f714acbd9c525ecda4d9331a15d5ed733f8b0007384ff996093b7c94931d5e268f044a509cb75d685b8105e9385606a03ed22e91
SSDEEP

3072:ZM7p9DRvYrkkms4NlZgkertL+4MOqtPprY:y7ppRvYAgEpEy4MOqNW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5f0f7fb80093bc44a2cae8590963663a

Files

5f0f7fb80093bc44a2cae8590963663a
.exe windows:4 windows x86 arch:x86

c0b5376fa23d2011e43ca183aaf0e66f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

PageSetupDlgW
dwOKSubclass
GetFileTitleA
ChooseColorA
FindTextW
CommDlgExtendedError

gdi32

AnimatePalette
CopyMetaFileA
AddFontMemResourceEx
CreateRectRgnIndirect
Chord

Sections

.text
Size: 70KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE