5e3b738aadd0fd18d0bef3f48187c1ea

General

Target

5e3b738aadd0fd18d0bef3f48187c1ea
Size

124KB
MD5

5e3b738aadd0fd18d0bef3f48187c1ea
SHA1

aa00e4603065d285be7ea33e5b120a2524bd0bb1
SHA256

7d0a2437039270bc7938ae3072149af91dd494971200b1ae54e9f3544aa52504
SHA512

b8983317edb98548f36012de795e2df0605b4ec1d97bc02be928a4e8c2f4c70702d3cb302aa4cf033666cbab03308354abb15304da054cd7398d6dfb998d6052
SSDEEP

1536:4wtvbBiTYB1Z+tKimD/p4t2A+yBKmsXPdTXmgBE8+5HgszOw6Y9yX75KgW:46b2MDDp4tJ+yBKmmdnE6YMPW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e3b738aadd0fd18d0bef3f48187c1ea

Files

5e3b738aadd0fd18d0bef3f48187c1ea
.exe windows:4 windows x86 arch:x86

3fbcf2529f0913a67aee4c3710e17e8b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesW
GetLastError
GetProcAddress
LoadLibraryA
ExitProcess
LCMapStringW
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleA
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
Sleep
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
VirtualAlloc
HeapReAlloc
RtlUnwind
HeapSize
GetLocaleInfoA
WideCharToMultiByte
GetStringTypeA
GetStringTypeW
LCMapStringA

user32

EnumDesktopWindows
PeekMessageW
DispatchMessageW

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3fbcf2529f0913a67aee4c3710e17e8b

Headers

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 28KB - Virtual size: 26KB

.rdata Size: 8KB - Virtual size: 6KB

.data Size: 4KB - Virtual size: 6KB

.rsrc Size: 80KB - Virtual size: 77KB

.text
Size: 28KB - Virtual size: 26KB

.rdata
Size: 8KB - Virtual size: 6KB

.data
Size: 4KB - Virtual size: 6KB

.rsrc
Size: 80KB - Virtual size: 77KB