05f71ee2cfd82c7474ec0304ad55802f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

05f71ee2cfd82c7474ec0304ad55802f
Size

214KB
MD5

05f71ee2cfd82c7474ec0304ad55802f
SHA1

4480dca6821cabbe2994f301e6179cb467158e93
SHA256

afda94a2f47fcfc62a48944ad74b83a4c21a16891eaf362d9329326589ffac2d
SHA512

8e98ebc11b5d4d571821efbc312685f0da2e24fc78c22db5e7f7435c4d64a7a76c5f9584d8ad6ea6b298986208e7c1688a2966bf3cea6708222e3deea48d449b
SSDEEP

6144:NEj+iHFeEla0zrgnZi4NU9KZFu9sifdB:07HFHlBEn8Q16sifD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05f71ee2cfd82c7474ec0304ad55802f

Files

05f71ee2cfd82c7474ec0304ad55802f
.exe windows:1 windows x86 arch:x86

197c70665a7a6a08820decf5d896091b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
ExitProcess

advapi32

RegCloseKey

comctl32

ImageList_Add

comdlg32

GetSaveFileNameA

gdi32

SaveDC

ole32

IsEqualGUID

oleaut32

VariantClear

shell32

ord62

user32

GetDC

Sections

FSX0
Size: - Virtual size: 396KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

FSX1
Size: 205KB - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

FYPMJW8F
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ