05bde2c0b189a0488a9588addcfb224b | Triage

Sharing

General

Target

05bde2c0b189a0488a9588addcfb224b
Size

137KB
MD5

05bde2c0b189a0488a9588addcfb224b
SHA1

5b4006ccf13abf1419be6dbf6114bf6e96c83fad
SHA256

68c1e79ac26ebe8c6e6ff02d91f34aacafec51b638d9ff6119ff74e7c34a0dda
SHA512

df5d8dd1482803eb4e136372a9f235a572c528ce21e1f3d1ebad3b352c7510a8106a57250dd71a268291e4900fcbcd35b59eb2a89af7d71c6ed7523c69e54b49
SSDEEP

1536:41UOgFvEuzmmjtTjjn4r1BiYcjKsrtoVS+E8PZygQ/hgF0T5JnUiO:4mhxEuachjsr1itoml/huuU9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05bde2c0b189a0488a9588addcfb224b

Files

05bde2c0b189a0488a9588addcfb224b
.exe windows:4 windows x86 arch:x86

23246f2da6cf648f65b244a8e900f70c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetDiskFreeSpaceA
FindClose
VirtualProtect
SetEvent
CreateThread
FindAtomA
GetCalendarInfoA
DeleteCriticalSection
SearchPathA
ExitProcess
GetLastError
FindVolumeClose
GetTickCount
FindResourceExA
Sleep
CloseHandle
TlsGetValue
ReleaseMutex
lstrlenA

user32

GetKeyState
CreateMenu
GetMessageA
CopyImage
EnableWindow
IsIconic
CloseWindow
CreateWindowExA
DispatchMessageA
GetScrollBarInfo
DialogBoxParamA
DragDetect
EndDialog
GetUpdateRect

msdmo

DMOEnum
DMORegister
DMOGetName
DMOUnregister
DMOGetTypes

advapi32

RegCloseKey

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE