51ec729fc5e969606e114d2d6d590c5a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

51ec729fc5e969606e114d2d6d590c5a
Size

636KB
MD5

51ec729fc5e969606e114d2d6d590c5a
SHA1

a292a23f3bf961f99376798482ddac6a6d325498
SHA256

8c757f01f8ee5e52415abec9cec092b04805ec6787b307bfde41b20c18f68ac9
SHA512

b6f4d535bfbd133a6dc8532e3007ddf40befdb059be9bb354f34faada4ef9abb29bc7545c1ec44abe6fcaaee146404c7448f51449c01c264f0c74e531a62286b
SSDEEP

12288:Wk0cbKSaoNTofqNbiXK2Pb1QKsTcHHR8xoY+hV4FK5I99LwvaCAsghIonyFgHhez:5UfYGXV1Xs5xoxVCKawvaysyweyg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
51ec729fc5e969606e114d2d6d590c5a

Files

51ec729fc5e969606e114d2d6d590c5a
.exe windows:4 windows x86 arch:x86

9eedb75980393e63349686b9a9c040ee

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryExA
GetConsoleCP
ResumeThread
CompareFileTime
GetAtomNameA
WaitForSingleObject
HeapCreate
InterlockedExchange
HeapReAlloc
lstrlenA
GlobalSize
VirtualProtect
GetVersion
WaitForMultipleObjects
GetCommandLineA
GetModuleHandleA
GetConsoleDisplayMode
GetUserDefaultLangID
CloseHandle
GetTickCount
GlobalUnlock

user32

EndPaint
GetCursorPos
GetWindow
ReleaseDC
CloseWindow
FillRect
BeginPaint
GetTitleBarInfo
GetDC
DrawTextA
ShowWindow
GetParent
GetClassNameA
FrameRect
DragDetect
SetForegroundWindow
wsprintfA
GetFocus
CreateIcon

rastapi

DeviceDone
DeviceListen
PortClose
AddPorts
DeviceConnect

quartz

DllGetClassObject

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ