1005bd1d763db09f6780f5d298fc089b | Triage

Sharing

General

Target

1005bd1d763db09f6780f5d298fc089b
Size

27KB
MD5

1005bd1d763db09f6780f5d298fc089b
SHA1

f49b38004fbef779fe6b1bb28d74bc02a664a3fe
SHA256

5a907c82c953724497b8c703c14051f2dcc2002192e18715f9f10e18862eda8b
SHA512

e68b7b3999378d278ae57aad57c47d089a4c486717247e6e97bee9b19878a4f686eebe13121dd4213c5033088c2f968610cf2c4e985e09e0c79ea3e50c59131f
SSDEEP

768:3Up/cZ2HW60/0nnsCCyhkM4nDOAQiICVL6oL:tZ22LsnnFCAJ4y8ICFt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1005bd1d763db09f6780f5d298fc089b

Files

1005bd1d763db09f6780f5d298fc089b
.exe windows:4 windows x86 arch:x86

ec3c23ab4fd6a8c108d3177a68bad408

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteCriticalSection
LocalFree
GetModuleHandleA
lstrcmpiA
GetVersionExA
CompareStringW
LeaveCriticalSection

msvcrt

_getcwd
_stricmp
qsort
_stat
_ltoa
_fullpath
strcspn
strchr
_vsnwprintf
__setusermatherr
_wtoi
wcscmp
tolower

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ