5d6f4454fb1ca51004f9f0477792c164 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5d6f4454fb1ca51004f9f0477792c164
Size

179KB
MD5

5d6f4454fb1ca51004f9f0477792c164
SHA1

9e0e927a33a4f0ebb73de9465e1a79343bd0b5a9
SHA256

5c333e52bb2a5ba177290fd078f41c4b8d58d96b0bb1e3235dd8b383b5a70a05
SHA512

1c8664b3aef7c72d4caad02098af2ff75f9e6d3c9c859c674f32e002f96a936b11fb9cb8de3df1996a012bca61e76dc64513ac8388181b55f7c87965f40f6c30
SSDEEP

3072:/4Nv7vnXekrVIjzIlDrWKzOKAT5BfkfqhM3zj2yWvMZ6ipQc6q/kViN/:/Kz/N8zIlKTBzuX2hvMZ6NcD/kViJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d6f4454fb1ca51004f9f0477792c164

Files

5d6f4454fb1ca51004f9f0477792c164
.exe windows:4 windows x86 arch:x86

63dafb6d269671111357f24f81096aa2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
FindFirstFileA
GlobalGetAtomNameW
GlobalHandle
ReadFile
EnumResourceLanguagesW
lstrlenA
SetFilePointer
WriteFile
GetModuleHandleA
EnumResourceTypesA
GetCurrentProcessId
FindNextFileA
GetSystemDirectoryW
WideCharToMultiByte
IsDBCSLeadByte
QueryPerformanceCounter
FindClose

oleacc

LresultFromObject
CreateStdAccessibleProxyW

newdev

UpdateDriverForPlugAndPlayDevicesA

Sections

.text
Size: 81KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 95KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ