5d6038d7edb67ab040908471b93b4858 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5d6038d7edb67ab040908471b93b4858
Size

775KB
MD5

5d6038d7edb67ab040908471b93b4858
SHA1

4e77883da1c886ff1f13d25fa4fb45a14f345efc
SHA256

24a39cae4c5cabfb04d50d0fc346b7b47cc44ca502d892cb0eecba0e58721177
SHA512

ae081d7e7996a06b17dc249d62dfba2ef3b45151cfd534c38338bd34a66038c1265682a3234ef5a00b26eccbb4928406a7d528cb2f448bc5e2378bda173ee50e
SSDEEP

24576:qw0A3ItjD1VbGzPRuoo6HD5+DuEVuplC+4:qw0A33VbEYCp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d6038d7edb67ab040908471b93b4858

Files

5d6038d7edb67ab040908471b93b4858
.exe windows:4 windows x86 arch:x86

a30130917aa45c10a75807936528c04d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetExitCodeProcess
lstrlenA
lstrcpyA
GetModuleHandleA
SetLastError
LoadLibraryExW
GetCurrentThreadId
HeapCreate
CreateProcessA
GetStdHandle
TlsGetValue
CloseHandle
UnmapViewOfFile
FindResourceW
GetProcessHeap
GlobalUnlock
CreateFileW
ReleaseMutex
GetEnvironmentVariableA
GlobalFree

user32

GetDC
DispatchMessageA
FillRect
CallWindowProcA
DrawEdge
CreateWindowExA
CheckRadioButton
IsWindow
DrawMenuBar
GetCaretPos
SetFocus
CreateIcon
GetDlgItem

rsaenh

CPDecrypt
CPHashData
CPDeriveKey
CPSignHash
CPGenKey

msasn1

ASN1BERDecEoid

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 765KB - Virtual size: 768KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE