5897e1a5806f53428932383e964cc699 | Triage

Sharing

General

Target

5897e1a5806f53428932383e964cc699
Size

90KB
MD5

5897e1a5806f53428932383e964cc699
SHA1

da8badb13a8e3d1cb01b4bed6c16042e71eeded2
SHA256

7b9e18dc5f3770716ab1d4fefcaef9b6ac5610ea501cafc8a63266b4a706059f
SHA512

a04522b25227b8e360f7f2f5ee372f6afa4e580104149534235900779d153d4c55d50711518e52df52907e839907383f550044aa5a0144d70307a17e9296e356
SSDEEP

1536:QRzjZmEnutefUwUuoZzUl+JVuJV3p917/:WZmgFUjjhUlMVuJV3p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5897e1a5806f53428932383e964cc699

Files

5897e1a5806f53428932383e964cc699
.exe windows:5 windows x86 arch:x86

cde20c5bd58aae3829ec588dbaeb5360

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DrawIconEx
GetWindowTextLengthA
CopyImage

advapi32

RegOpenKeyA
RegCreateKeyW
RegDeleteKeyW
RegGetKeySecurity
RegQueryInfoKeyA

kernel32

CopyFileA
GetFileType
ExitProcess
HeapAlloc
ExitThread
GetCPInfo
GetPriorityClass
FlushFileBuffers
HeapFree
WriteFile
GetLocalTime
OpenFile
GetStdHandle
GetLastError
FormatMessageA
FreeResource
lstrcmpA
DeleteFileA
lstrcatA
CompareStringA

Sections

.eecd
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.7h1d
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.0f17
Size: 43KB - Virtual size: 403KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.g2h5
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hba03
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ