5d724e40c95ba7a67bb8f6fab35be4b2 | Triage

Sharing

General

Target

5d724e40c95ba7a67bb8f6fab35be4b2
Size

180KB
MD5

5d724e40c95ba7a67bb8f6fab35be4b2
SHA1

a4a9949bd610d9b168875cda25749a9209ccc0b8
SHA256

09a7c017a1dfdc6b866bf92b5dff9c66b79bf45d590aa3b883d91b87ac3e78f2
SHA512

1f70268b216dfdb1ab3fa91317986487610ec03ac1516767f8c4c5aa61b472efecdca02170289b891a8e96f88bd82192e06a0d77e0123172ad5b89f100d41a22
SSDEEP

3072:gctGenH5LcvQg4amm+SqrE8W3sb24j76s0+udGrivO5C8cIQvs5+0Wy:gctG2H5Lc3+S+E62+76s0+uy88EsVWy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d724e40c95ba7a67bb8f6fab35be4b2

Files

5d724e40c95ba7a67bb8f6fab35be4b2
.exe windows:4 windows x86 arch:x86

20e88bfb5134e2f42f03e5e058c1d8dd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset
strcmp
memmove
memcpy
_CIcosh
strlen

kernel32

GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
CloseHandle
InitializeCriticalSection
GetModuleFileNameA
HeapReAlloc
HeapAlloc
HeapFree

user32

CallWindowProcA

Sections

.code
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 5B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ