5381d1e44400a12e162958d3190fbad3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5381d1e44400a12e162958d3190fbad3
Size

84KB
MD5

5381d1e44400a12e162958d3190fbad3
SHA1

249684179d934486ff3cff70faad6dd35eaf3c4c
SHA256

49ba428012ec144f0e47cd2f5e84434f644c87efb65b92a64b397198048f3ca3
SHA512

969f4f61acf41885996995ab4d41a18cdb0fb42108e59289a079fd799a4d47c065efb2a9a0d61f968516335e464229f434331de01aac4ec783ff6d4e3d9e866d
SSDEEP

1536:eDIlDlC/x4HTxhKuWDR4y0B82+o4BNlrudruKxvE:EaDleuyHiy0B8Ro4PlidTdE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5381d1e44400a12e162958d3190fbad3

Files

5381d1e44400a12e162958d3190fbad3
.exe windows:4 windows x86 arch:x86

7774559a50dc2d0b81b718aeca4c1970

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetEnvironmentVariableA
GetModuleHandleA
GetStartupInfoA
SetConsoleActiveScreenBuffer
VirtualAlloc
FindFirstFileExA
GetOEMCP
HeapAlloc
GetACP
GetVolumePathNamesForVolumeNameA

hid

HidP_InitializeReportForID

user32

GetClipboardFormatNameA
EnumDisplaySettingsExA
GetWindow
CascadeChildWindows
DisplayExitWindowsWarnings

gdi32

GetDeviceCaps
ChoosePixelFormat

dsound

DirectSoundEnumerateA
DirectSoundEnumerateW

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 180KB - Virtual size: 177KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ