51e01b28428bf9648ef5b156f1c2d082 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

51e01b28428bf9648ef5b156f1c2d082
Size

404KB
MD5

51e01b28428bf9648ef5b156f1c2d082
SHA1

1d066854f74ab573dd80b7ec227a586f0766a817
SHA256

73f20c0c00d7aa8bc63c33376007c1fe526778b09a45ef311ed8b76cd209dfe6
SHA512

8b060817c8d80b5d6e8f4d90183ceac64ab02b54b229c104af3ffcd69519ddf9e296b049753a31eff3c34500e018c8eb659688047d11b111584a9023d38e1056
SSDEEP

12288:cjVr5gZ3Tj5JpZGGC5A2Rf5POXbVZRkiK:uVGzpZ/pY+k1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
51e01b28428bf9648ef5b156f1c2d082

Files

51e01b28428bf9648ef5b156f1c2d082
.exe windows:57121 windows x86 arch:x86

5f20b29522d2ca25165dc0814624ab01

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

SetSecurityDescriptorDacl
RegOpenKeyExA
RegOpenKeyExW
RegDeleteValueW
RegCreateKeyExA

kernel32

VirtualAlloc
LoadLibraryA
SetEvent
ExitProcess
WaitForSingleObject
GetModuleHandleA
VirtualFree
LoadLibraryW

shell32

ShellAboutW
SHGetPathFromIDListW
SHGetMalloc
Shell_NotifyIconW
ExtractIconExW
SHGetFileInfoW
CommandLineToArgvW
SHGetPathFromIDListW

user32

MessageBoxW
GetDC
LoadStringW
SetWindowPos
SetCursor
GetDesktopWindow

gdi32

GetObjectW
TextOutW
GetTextMetricsW
CreateFontIndirectW
TextOutW
PatBlt

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 388KB - Virtual size: 964KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ