5125d762e1c8bd288c7bb99059fc27d5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5125d762e1c8bd288c7bb99059fc27d5
Size

147KB
MD5

5125d762e1c8bd288c7bb99059fc27d5
SHA1

97123040ee27670a2ed871d62cdb34e493ee7469
SHA256

9edaf62d9e2790729b0bd5531dfe1bb22391db6e0bfe1a0fad69c991872c9e34
SHA512

235e3f078448757612bb31bb00c5a2d79ebdfcd2a8397d0dcd3ca42f4021e070cf34b8cad3f87bc6f16be1943576e4e814cfdb25fb8a74e630af34d318eefff2
SSDEEP

3072:+cBgBolzLCyxKovl+IXuQINSIypfxfA5eL8DpPP51rQ6ZWKHj:LgBolLvxTvl+IXbGypfu289PP51rQ6Z5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5125d762e1c8bd288c7bb99059fc27d5

Files

5125d762e1c8bd288c7bb99059fc27d5
.exe windows:4 windows x86 arch:x86

1066b819e2fdb06d7801585205403170

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oleacc

LresultFromObject

ole32

StgOpenStorage
CoUninitialize
CoCreateInstance
CoFileTimeNow
CoInitialize

shell32

SHGetSpecialFolderPathW
ShellExecuteExW

kernel32

LoadResource
VirtualProtect
LoadLibraryExA
SetEndOfFile
TlsGetValue
OpenFile
TlsSetValue
EnumResourceNamesW
TlsFree
GetUserDefaultLCID
GetCurrentProcessId
ExitProcess
TlsAlloc
GetVersionExA
GetCurrentThreadId
GetModuleHandleW

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ