5f4478c6f4a9aa6d6713b0754e09337e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5f4478c6f4a9aa6d6713b0754e09337e
Size

273KB
MD5

5f4478c6f4a9aa6d6713b0754e09337e
SHA1

c95c1968b153226985b29f514555d974b830e610
SHA256

5013ff406ab4d23827d771110c854f755ff3c33ca877b3447550a9ef1652cb28
SHA512

b6978544bc90d8c5b223dff559c3da60a864e47a37b6924b5543272321fee26bb6741e9f0331e514d6ce26d2fc392196ce053f71d0c21b09db363db347f355c9
SSDEEP

6144:G5APtPD53esuxVjOqi329IQAXRyvOOiU6/Lam1/OGOMBZbl27:vPtP/urdiTXRSVi7j1/JL2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5f4478c6f4a9aa6d6713b0754e09337e

Files

5f4478c6f4a9aa6d6713b0754e09337e
.exe windows:4 windows x86 arch:x86

c00093611ed5bf288bfe0b39777156f3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalAlloc
GetPrivateProfileStringA
IsDBCSLeadByte
GlobalGetAtomNameA
LoadLibraryExA
SizeofResource
GetPrivateProfileIntA
SetErrorMode
CreateDirectoryA
GetPrivateProfileSectionA
GetProfileStringA
FindResourceA
GetProcessTimes
EnumResourceTypesA
GetCommandLineA
FormatMessageA
GetPrivateProfileSectionNamesA
WriteProfileStringA
LoadResource
WritePrivateProfileStringA
lstrcatA
CreateFileA
GetTickCount
TerminateProcess
GetModuleFileNameA
IsValidCodePage
SetUnhandledExceptionFilter
lstrcpyA
GetFileAttributesA
GetCurrentProcessId
lstrcpynA

shell32

SHIsFileAvailableOffline
SHGetPathFromIDListA
ShellExecuteExA
DragAcceptFiles
SHBrowseForFolderA
SHGetFileInfoA
Shell_NotifyIconA

version

GetFileVersionInfoA

Sections

.text
Size: 117KB - Virtual size: 117KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 153KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ