5e040792a1d70f95f0eb0296f8d4a451 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5e040792a1d70f95f0eb0296f8d4a451
Size

815KB
MD5

5e040792a1d70f95f0eb0296f8d4a451
SHA1

823eeff226db230165a4836b7529562b95a77ad2
SHA256

9b29025e04fcf3b707d37402d7899acf05e2f72d86925635e45e932ab40f4eaa
SHA512

a0d82b608b3fff8efb4efd60d9f7d550304d0d2b44cb10cc2dfc92df16c60ea0d16b8df7cb14b5fb3b2de747125db61612de7b27ea489b7b53e28f89ec6e1177
SSDEEP

24576:WMZ2VikpR7gmFMbBJJs7fDsdpDlcwXnKrklVQub:ZcckplxYBJJewP7nKrkrJb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e040792a1d70f95f0eb0296f8d4a451

Files

5e040792a1d70f95f0eb0296f8d4a451
.exe windows:4 windows x86 arch:x86

06acd7ea918be2827359a09d365faaca

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapCreate
LoadLibraryExW
CreateMutexA
GetCurrentThreadId
SetConsoleCursorInfo
ExitThread
GetModuleHandleA
CreateFileA
GetEnvironmentVariableA
FindAtomA
GlobalFree
CloseHandle
GlobalUnlock
TlsGetValue
GetACP
FindClose
ReleaseMutex
SetLastError
PulseEvent
FindResourceA

user32

CheckRadioButton
FillRect
DispatchMessageA
DefWindowProcW
GetIconInfo
GetDlgItem
CallWindowProcA
CopyRect
DrawEdge
DrawMenuBar
IsWindow
GetFocus
GetDC

uxtheme

GetThemeRect
DrawThemeText
GetThemeSysInt
DrawThemeIcon
DrawThemeEdge

clbcatq

SetupOpen

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ