5dbf45cd63801c14d5216a3f220e0f9f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5dbf45cd63801c14d5216a3f220e0f9f
Size

13KB
MD5

5dbf45cd63801c14d5216a3f220e0f9f
SHA1

35a6152a80100e7d3fafcd94f51fe4969976070a
SHA256

554c006004776e66aeaa7f43df5facbd9aff316ecff2b9af39a5aaa833454baa
SHA512

947ecb89562192354528906b26f493b92c4434261fe29226bef00fe17db3316df09530453e00544ee42ea0bbdb4fef4471e3af333ab128abcfcc3b488d2cbf9b
SSDEEP

384:OVUfWY0TdH8LJhZnrWDYAlRrDqvkw8SnewmkHf3O:YYMdOhkzlRSbqW3O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5dbf45cd63801c14d5216a3f220e0f9f

Files

5dbf45cd63801c14d5216a3f220e0f9f
.exe windows:1 windows x86 arch:x86

2936b87f8316a580cf9371f8b7021482

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
DisableThreadLibraryCalls
EnterCriticalSection
ExitProcess
FreeLibrary
GetLastError
GetModuleHandleA
HeapDestroy
HeapFree
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
LoadLibraryA
Sleep

user32

CharNextW
CreateWindowExW
GetSysColor
IsWindow
ReleaseDC

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ