5840d57ab634c187aa34bcdf8d21b212 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5840d57ab634c187aa34bcdf8d21b212
Size

43KB
MD5

5840d57ab634c187aa34bcdf8d21b212
SHA1

ad0ac24af44994505e3a8ffebc4a974bcda384af
SHA256

7c0bc9330d81d46bf8cbf59c6c9b8bd571ccfeda0e07ad5a05ca611adc9be5e8
SHA512

254b971498ee335032403935e119b4bbc91e6ecd4d76a0e1bc8c004f4d0de01211e405f0ad9ae30433e4b4843d95b6d70b1a0620f2729ac6e351617b64473a7a
SSDEEP

768:OjP0SANrdG52sb+yf9v5ry/d6tiraFw1OTSo6Z4MHXr/UI:i0ZKb+oy/kdXMZdXr/UI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5840d57ab634c187aa34bcdf8d21b212

Files

5840d57ab634c187aa34bcdf8d21b212
.exe windows:5 windows x86 arch:x86

be963b0a42606df520d3252490308297

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalLock
GetSystemTime
HeapFree
ExpandEnvironmentStringsW
GetModuleHandleA
UnmapViewOfFile
SetFileAttributesW
HeapAlloc
FindFirstFileW
SetThreadPriority
FlushFileBuffers
GetTimeZoneInformation
SetLastError
GetUserDefaultUILanguage
SetFileTime
GetTempPathW
OpenProcess
lstrcmpiA
SetEndOfFile
CreateEventW
GetSystemTimeAsFileTime
DisconnectNamedPipe
CloseHandle
GetCommandLineA
EnterCriticalSection
MoveFileExW
lstrlenA
GetDriveTypeW
SetEvent
lstrcpynW
GetModuleFileNameA

user32

GetWindowTextW
ExitWindowsEx
GetWindowLongW

Sections

.wvat
Size: 35KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tuvwv
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.etyza
Size: 4KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ