5e492cf98f639a65d70b0798b8cb863d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5e492cf98f639a65d70b0798b8cb863d
Size

169KB
MD5

5e492cf98f639a65d70b0798b8cb863d
SHA1

4d68b417f0ac9560b51217e15f96e7968ccfedbf
SHA256

e96fe0a5a784efefbf1676021a4ce91bf2a03b4f4a75a9c7744994697f6d0558
SHA512

7875ae32c7ded7e9840e73c9c2b7d7c0f0667e1c8957a8c1c437ccef891a53e32e9a5d046dc6a92b00ef1b8c2c6f17f23d5851060ea52d088e9e6942ce843ae7
SSDEEP

3072:Pj4NqsMYM7dLwe9Rulr6/JN4LglK+B4r46IFc7InVrwR6g63s7bEo+W:esxweMg4kl9BsKFc0nVEf65o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e492cf98f639a65d70b0798b8cb863d

Files

5e492cf98f639a65d70b0798b8cb863d
.exe windows:4 windows x86 arch:x86

7b79923ea268856ad0de5e7958f04c63

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstVolumeA
HeapCreate
GetPriorityClass
TlsGetValue
EnumResourceTypesW
InitializeCriticalSection
TlsAlloc
GetStartupInfoA
TlsFree
GetFileType

user32

GetWindowInfo
MessageBoxW
GetDC
LoadCursorW
CreateWindowExW
GetUpdateRgn
RegisterClassExW
EndDialog

oleacc

LresultFromObject

Sections

.text
Size: 113KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 604B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.apexi
Size: 1024B - Virtual size: 372KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ