5945b26baa7edc11b96da702320c6405 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5945b26baa7edc11b96da702320c6405
Size

372KB
MD5

5945b26baa7edc11b96da702320c6405
SHA1

a93acec8694191026bbb201bf9057b8ff264cd90
SHA256

6b2239bb716d81879c38440faefe34d7b031183bd5a352d6dd6823c67d78cb73
SHA512

98c31750fec031eeab7916bde8280e19e792c9e98b39d7f307ee179f50aa8216b248c0f1654db95e8ba08825e478281bb5b5cf77a26f36545e8b08842d88f80e
SSDEEP

6144:8gGBGyRZreLaw8nmQWueyVgt/HcF06LiXShLfwys10lpzhhclNxyvM:8gsnneF8m4ewS/HcF+ih7wp10l1h+Txd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5945b26baa7edc11b96da702320c6405

Files

5945b26baa7edc11b96da702320c6405
.exe windows:4 windows x86 arch:x86

71406b034f7ce434feafba45191aced8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetDriveTypeA
GetTickCount
lstrlenA
FreeConsole
CreateFileW
GetExitCodeProcess
GetLocalTime
GlobalFree
ExitThread
GetPrivateProfileIntW
GetComputerNameW
CloseHandle
GetModuleHandleW
SetEvent
ReadFile
LocalFree
ReleaseMutex
GlobalSize
FindVolumeClose

user32

DrawStateW
GetClassInfoA
GetCaretPos
DispatchMessageA
CreateWindowExA
GetDlgItem
EndDialog
GetSysColor
GetKeyState
GetMenu
GetClientRect
CallWindowProcA
GetCursorInfo

clbcatq

ComPlusMigrate
ComPlusMigrate
ComPlusMigrate
ComPlusMigrate
DllGetClassObject

ntshrui

IsPathSharedA

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 424KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 363KB - Virtual size: 362KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ