5d485192e7dc2e4e79474581c08eeb06 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5d485192e7dc2e4e79474581c08eeb06
Size

13KB
MD5

5d485192e7dc2e4e79474581c08eeb06
SHA1

349167736d506461b4f4e7602e01a89ee69c7f9e
SHA256

66d001b3c44dcf197ac2164bed4205df0805a1a3d9b4f64120202e9d990784fe
SHA512

abb29eb1c2edcbc621fd720cc4ce016a66a1cd0b425cf435e212e3b4ef1f53657d39aed4c6abf72e9c53c6c4495b2395c93283d04e0c8e0f2ee5ab2cf8fec930
SSDEEP

96:17VBklS8VKIK2SCOoQHf8iTl8ZIlPJz9gXzqFe5BYQ:2lS8VhKHo9el86JWmeDYQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d485192e7dc2e4e79474581c08eeb06

Files

5d485192e7dc2e4e79474581c08eeb06
.exe windows:4 windows x86 arch:x86

c01043471ba7fe043ca590b1c3a72137

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDC
GetClassNameA
DestroyWindow

kernel32

CreateThread
ExitProcess
GetLastError
QueueUserAPC
Sleep
SleepEx

gdi32

GetObjectA
EnumObjects

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 384B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ