5515fecb41d366d615ceb95f7b490f67 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5515fecb41d366d615ceb95f7b490f67
Size

167KB
MD5

5515fecb41d366d615ceb95f7b490f67
SHA1

f50501e3b8a730aeb2dac753091f6238d6c5daa4
SHA256

f0aeb6d246dedd426083854693b3a01b4e0c85ae85b47043d7cea3b8322b38c2
SHA512

fcc07fdc6f62c4624d39f9204831e31582825827467f26094ff506c9a34cb54128a35b2dfa2f3913b9e77a8841b6b2d99196b8949c1c62dc9d4f1802e078c0d9
SSDEEP

3072:G+F/ivC0Q+T2bajLnHs8KkTK9+1fs6iW3l92nSDXLaE8Rfm0Snt7KKmaCrP:G+ZivCcCAC+Fs653l92nq/4CeLaCrP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5515fecb41d366d615ceb95f7b490f67

Files

5515fecb41d366d615ceb95f7b490f67
.exe windows:4 windows x86 arch:x86

aa36113af0f5e8bbe9aff7cb6bc049e6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCalendarInfoA
GetPriorityClass
CreateFileW
GetCurrentDirectoryW
SetCurrentDirectoryW
SetFilePointerEx
EnumResourceNamesA
GetLocalTime
GetProcessAffinityMask
FindFirstFileW
FindResourceExW
LockResource
ExitProcess
FlushInstructionCache
LoadResource

msimg32

AlphaBlend
TransparentBlt

comctl32

ImageList_DragLeave
ImageList_DragMove
ImageList_DragEnter

ole32

CoGetMalloc
ProgIDFromCLSID
CoTaskMemFree
StringFromCLSID

Sections

.text
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 832B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ