5c8f54036a4c451c4e5195b8e3efc61a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5c8f54036a4c451c4e5195b8e3efc61a
Size

75KB
MD5

5c8f54036a4c451c4e5195b8e3efc61a
SHA1

31ca0f028357c8eb569ed17fd55ea9c16652b9fc
SHA256

e528a6dd4a117e883895cd86f349c4e3b2b5c7f11d6e3cba2560af915f22ceae
SHA512

40c457a937204d96ccea97d204dd40df314774da69815a04264b564df716f5157ef5b9acee2d72ac4c8456e5745e21b146ab8700a31ec9e86e726df21da6d900
SSDEEP

1536:f42SR5HfWvGCGF6iOfRpOHTZ5bSPmRtv+fz+8sqiTIfPsF8GG:xQN+jGF6iOfREHTTamR3Oi6E8GG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c8f54036a4c451c4e5195b8e3efc61a

Files

5c8f54036a4c451c4e5195b8e3efc61a
.exe windows:5 windows x86 arch:x86

fa568dbbcccaeb9b37603c75194d2163

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFilePointerEx
GetCommandLineA
OpenJobObjectA
GetStartupInfoA
WritePrivateProfileSectionA
VirtualAlloc
GetModuleHandleA

gdi32

RemoveFontResourceA

user32

CharLowerBuffA
LoadBitmapA
GetWindowTextA
SendMessageTimeoutA

Exports

Exports

IsElhdmrltfrb
Kpfyjpl
GetHcsljwci

Sections

.text
Size: 72KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 616B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ