5165e18d2fdb097ceb381490224f669f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5165e18d2fdb097ceb381490224f669f
Size

36KB
MD5

5165e18d2fdb097ceb381490224f669f
SHA1

e505923abc1ea06ccef2f0af293dc270d5874779
SHA256

df8a67c85423f6ea15065ac32c8adf0d5cc9ee697437b757c1048762ef3e3cc5
SHA512

fbfc9f0dea40db6f4cda92de6a0bab8d67af0e183d0c08a2e12c0a62009c0ee84b68df3f6cbf27ed16715faf9c2819e397d44ae3600fa0a8f75d4fb18832a66b
SSDEEP

768:lKTv23lAoLb5kB2Cvf8NuiYum2FZAcdbudepQsb+GZ/0:cv0lAY5k7M5YuXFSc1ukQK+V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5165e18d2fdb097ceb381490224f669f

Files

5165e18d2fdb097ceb381490224f669f
.dll windows:4 windows x86 arch:x86

3b6e3b0f276cd8981b021d6bbced6749

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

MessageBoxA

kernel32

ExitProcess
GetSystemTimeAsFileTime
CloseHandle
GetStartupInfoA
GetModuleHandleA

advapi32

RegQueryValueA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 29KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.itext
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 60KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ