5e1f4550ef34c7dc253b46f7dd5655ea | Triage

Sharing

General

Target

5e1f4550ef34c7dc253b46f7dd5655ea
Size

144KB
MD5

5e1f4550ef34c7dc253b46f7dd5655ea
SHA1

f3a9a8265d279ec28811c04cc77f2b32f972c9c6
SHA256

a218e7cd3a795b0f8f62a8c81349a6d7bf69d4bfa6c5f2bbae2dea59ef15101d
SHA512

540829d41440d9c055f006f7239f9bcbeffecad83f5958269ea4a88300459fe6aba64b9cbcf0e07e4085620bebfdd91777ac2f6b094a7ab090eb9f86064def41
SSDEEP

3072:V7GeKlH3SvQ0tRpSFsOTHHrdT+cT3B0DBpq7qZ2o2LlmSbReH:Vvs36HMZHkDBZZ2bLlm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e1f4550ef34c7dc253b46f7dd5655ea

Files

5e1f4550ef34c7dc253b46f7dd5655ea
.exe windows:4 windows x86 arch:x86

b59bedf0c28781f157b9b450c0026ffa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileMappingA
ExitProcess
ExitThread
GetCommandLineA
GetCurrentProcessId
GetCurrentThreadId
GetModuleHandleA
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
GlobalAddAtomA
LoadLibraryA
MultiByteToWideChar
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
VirtualAlloc
VirtualProtect

msvcrt

fwrite
strncmp
wcscmp

user32

SetCapture
FindWindowExA
SystemParametersInfoA

comctl32

CreateStatusWindowA
InitCommonControls
ShowHideMenuCtl
CreatePropertySheetPageA

Sections

.text
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ