5794f927f012b8eb74cf4242be75ab7d | Triage

Sharing

General

Target

5794f927f012b8eb74cf4242be75ab7d
Size

636KB
MD5

5794f927f012b8eb74cf4242be75ab7d
SHA1

fa111bff4dee07f5db6bc8bd5b4f8b349ff5d063
SHA256

c253fff1dfc4a170b4e1d001c2e850fd6b30e3b3d5da8363e6aa40e7e4019f9a
SHA512

b64570113d5cd2a0c77090fd842227c27ae5545d6fb0d2af8fa2162ddc615d509d04c965795d8b33bbcc896ec5f0d23f4075cf61d3b90c8c0441da80258e4838
SSDEEP

12288:g97jpS31ZxKSpzluJzNo15jH78WtvspyjriT/bmUH4Cu:g1jcZxKcUt2JH7ztdmTA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5794f927f012b8eb74cf4242be75ab7d

Files

5794f927f012b8eb74cf4242be75ab7d
.exe windows:4 windows x86 arch:x86

23935c9814b985f5c437542c4d35abdb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SuspendThread
InterlockedExchange
GetStdHandle
HeapReAlloc
GlobalUnlock
GetVersion
GetCommandLineA
GetAtomNameA
WaitForSingleObject
GetModuleHandleA
CompareFileTime
GetConsoleCP
lstrlenA
GetSystemDefaultLangID
LoadLibraryExA
WaitForMultipleObjects
VirtualProtect
LocalSize
GetTickCount
HeapCreate
CloseHandle

gdi32

CreateFontA
CreateICA
EndPath
EqualRgn
BeginPath
FloodFill
Escape
GetFontData
GetTextColor
GetMetaRgn
GetRgnBox
EngLineTo
DeleteObject
Ellipse
GetStringBitmapA
AbortPath
GetMetaFileA
DeleteDC
CreatePalette

winmm

PlaySoundA
auxGetVolume
CloseDriver
auxSetVolume
OpenDriver

secur32

AddCredentialsA

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ