5514c16dfae5282294072330a81bc117 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5514c16dfae5282294072330a81bc117
Size

102KB
MD5

5514c16dfae5282294072330a81bc117
SHA1

3fb404f6807f6b6035381dc54c1d138d29b02f5a
SHA256

35bf584d25ce6bc89baa923d1cf1df8c6729e19cb9749c81ea882f7eb4e91b63
SHA512

bfa2db9d12751c61e71f341ed663c1ed21599e0b20e6c88915f155feffa2473a16e811bb208792a02e3f9bd353ad21e6b2a8dfd9cb9ae38b66556f11e3a533f4
SSDEEP

1536:E0GqRBl7XmCUuQ+Y4t/WFTIvT7Kq65/KEjMdg4RX4FhVahd8gNvh3+5uOJ3pKoRQ:jRBdmtZAWaK1ZQd3QhMsgNvh3+5uO1eJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5514c16dfae5282294072330a81bc117

Files

5514c16dfae5282294072330a81bc117
.exe windows:4 windows x86 arch:x86

5dce9ba7b46c218c70f2e2e3d6628378

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleTitleA
GlobalLock
CreateEventA
GetModuleHandleA
FreeConsole
CloseHandle
FindClose
GetLastError
CancelIo
VirtualProtectEx
CreateMutexA
lstrlenA
IsDebuggerPresent
LocalFree
GetStdHandle
EnumResourceTypesW
GlobalUnlock
GetSystemTime
LoadLibraryExW
IsBadReadPtr

user32

EnumWindows
GetMessageA
LoadCursorA
IsIconic
IsMenu
GetParent
GetKeyState
GetMessageA
GetDlgItemTextA
EndDialog
CreateWindowExA
DialogBoxParamA
GetSubMenu
MessageBoxA

clbcatq

GetCatalogObject
SetSetupOpen
GetComputerObject
CheckMemoryGates
ComPlusMigrate

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ