5cb76941baa52da90a96cb1115f650ba | Triage

Sharing

General

Target

5cb76941baa52da90a96cb1115f650ba
Size

149KB
MD5

5cb76941baa52da90a96cb1115f650ba
SHA1

d642f84cd0da9f55fb32eb4a7323dc09cfa948d4
SHA256

38b00e2dd5049d3d3bedf6138e2b1df4e31e4847c6827ee180a5726617e81099
SHA512

4df4266586b7b06831b78974d14aa80c7a01ea78ee022c059bb231eb56320b3465489336b9cd712e6e460188eafdbe353259eb29daf986f537292dabe99cc459
SSDEEP

3072:bwTTjCB4WUZtHTjhrv8dNP9OVi8F57jOmoe3rA:bKsUZth8dNP9OVi8FhHf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5cb76941baa52da90a96cb1115f650ba

Files

5cb76941baa52da90a96cb1115f650ba
.exe windows:5 windows x86 arch:x86

019e08cf53d2892a578736f178dc9ace

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

RestoreDC
CreatePalette
MoveToEx
LineTo
GetClipBox
SetTextAlign
DeleteDC

kernel32

QueryPerformanceCounter
SetCurrentDirectoryA
lstrcmpiA
GetDriveTypeA
GetStartupInfoA
GetCurrentThreadId
GetProcessHeap
GetCommandLineA
GetCurrentThread
VirtualAlloc
VirtualFree

user32

GetDesktopWindow
GetDC
ShowWindow
DispatchMessageA
TranslateMessage

glu32

gluTessCallback

comctl32

InitCommonControls

Sections

.text
Size: 1024B - Virtual size: 940B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Akf. Pgl
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ