5f30f5ce573bc0ecce07526f5491d12a

General

Target

5f30f5ce573bc0ecce07526f5491d12a
Size

148KB
MD5

5f30f5ce573bc0ecce07526f5491d12a
SHA1

867cd079cff91cbfe6edee28846db48535b13fed
SHA256

7de741bf490ae9c776ae116c0bb235b635efe13160d5a56ab9fdd3224c7a8879
SHA512

45c0b4ccc4b922e74e83b4851aa8eb49cf69abd23d5e80ecfcba1ec3e3dc017f8fcdd3d18c96abf8262c5613e83b0543764d21bddb794ee3690fda7472ed6ebe
SSDEEP

3072:A9neaiHWFheVQ25OgT51n4Y3lxNc7uM92lk71ldjuL:A9neBIhgTX4Y1xov92lk71zjuL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5f30f5ce573bc0ecce07526f5491d12a

Files

5f30f5ce573bc0ecce07526f5491d12a
.exe windows:4 windows x86 arch:x86

76ed7bbfa417599ded256264eb6cf490

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindClose
InterlockedExchange
GetThreadLocale
HeapAlloc
GetStartupInfoA
GetLocaleInfoW
FindNextFileW
GetCurrentProcessId
CloseHandle
InitializeCriticalSection
LocalAlloc
SetConsoleCP
LCMapStringA
GetEnvironmentVariableA
GetEnvironmentStringsW
VirtualProtect
GetProcessHeap
GetACP
GetTickCount
GetModuleHandleA
GetCommandLineA
InterlockedIncrement
GetCurrentProcess
EnterCriticalSection
WaitForSingleObject
RtlUnwind
LockResource
GetSystemDefaultLCID
IsBadWritePtr
GetVersion
QueryPerformanceCounter
GetOEMCP
GetVersionExW
GetConsoleMode
GlobalFree
MoveFileExW
GetLastError
SetStdHandle
ExitProcess
GetCurrentThreadId

gdi32

MoveToEx
ExcludeClipRect

user32

SendDlgItemMessageW
SendMessageW
GetDlgItemTextW
GetCursorPos
SetScrollPos
InflateRect
SendMessageA
ScreenToClient
GetFocus

advapi32

EqualSid
RegEnumKeyExW

msvcrt

memset
_amsg_exit
_errno
fflush

ole32

CoMarshalHresult

lz32

LZDone

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 45KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

76ed7bbfa417599ded256264eb6cf490

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

gdi32

user32

advapi32

msvcrt

ole32

lz32

Sections

.text Size: 29KB - Virtual size: 29KB

.rdata Size: 45KB - Virtual size: 54KB

.data Size: - Virtual size: 17KB

.reloc Size: 512B - Virtual size: 252B

.text
Size: 29KB - Virtual size: 29KB

.rdata
Size: 45KB - Virtual size: 54KB

.data
Size: - Virtual size: 17KB

.reloc
Size: 512B - Virtual size: 252B