5850decbac207a48b2990d45c6bf280d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5850decbac207a48b2990d45c6bf280d
Size

11KB
MD5

5850decbac207a48b2990d45c6bf280d
SHA1

b6eab5aa35656a85cbc51eec740143c6efeb5b25
SHA256

b08eac5785b9a0ce982d2c24bd108bf6fc0af36e6cbe3a5cdb152ddbfd93d268
SHA512

35b49622682c1cd6e6a0634f4c3ebde23a42324f80fb089b0e62221feb18f8547d8c7c2c9acefbc90472440e8b7058e55b6da17d6d3424930fd35acc6afd27d1
SSDEEP

96:jqFTttrL9jJThpLxpArQBu/89URmwuB2t5vqn07Hkb0ZpWwR7ehB90D27:kt3LhjG0SmwmqqngymWwR7y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5850decbac207a48b2990d45c6bf280d

Files

5850decbac207a48b2990d45c6bf280d
.exe windows:4 windows x86 arch:x86

9aea8137a0985ee4c4c6bd21b412c56f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetKeyboardLayout
GetDoubleClickTime

shell32

ShellExecuteA

shlwapi

StrStrIA

kernel32

CloseHandle
ExitProcess
GetCommandLineA
GetModuleHandleA
GetProcAddress
GetTickCount
LoadLibraryA
lstrcatA
lstrcpyA

advapi32

RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegCloseKey

urlmon

IsValidURL

comctl32

GetMUILanguage

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 766B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 552B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE