05133a7286935a513820f44cd74c1297 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

05133a7286935a513820f44cd74c1297
Size

32KB
MD5

05133a7286935a513820f44cd74c1297
SHA1

0e386eb98c6ca9191e58236ed2ce8b3a1994f465
SHA256

81343d0b52294033eb067c87297ef3dd0afdbbaa9715587fb44205d30e47a7f0
SHA512

6765ef8492e806aa1833a4506997da6f6aa2ef8133f47844608f3b24400dc1133625413d67ca6b38cad1778210f11d136c2b826d0e0ad4d2eedaa6ecf0e1cd2e
SSDEEP

768:BD/GtepR3BUu7fSCMHWTQNfFyTNsnkuuF278iu:BDMAR3WMS5HTNfISkuuF27Lu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05133a7286935a513820f44cd74c1297

Files

05133a7286935a513820f44cd74c1297
.exe windows:4 windows x86 arch:x86

d2e28b40e8afff191f2e1c00992db232

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ClipCursor
GetMenuStringW
PaintMenuBar
DestroyCaret
UnregisterClassA
GetClassNameW

kernel32

GetLastError
VirtualProtect
GetTimeFormatA
GlobalAlloc
FatalExit
PrepareTape
CreateDirectoryW

gdi32

PolyDraw
SelectObject
EngTransparentBlt
DdEntry5
GetCharABCWidthsI

Sections

.text
Size: 4KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE