5970e5532afcd26b4579218925eb3ff1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5970e5532afcd26b4579218925eb3ff1
Size

244KB
MD5

5970e5532afcd26b4579218925eb3ff1
SHA1

6efeb0dbf858a957e57529133d8bff720401c2a1
SHA256

cfa9cec70a95fc7804c6303d74e586f4ff6c829a46d6bb7338b2e6cb5c4d0a57
SHA512

df451420823f150afc6600e744c49c5071b6c93c092ae11c9c1213becf45d53b9bd4be5c10eb3b25ea04de3fde6cc4ff9ba033844b3962c018f694c86e7bd69f
SSDEEP

6144:kH7SvjhvTiroht7qh2EyQVNdh8LozGXC4fJ1jR:27S7hbirohNqUsVSMSzfJFR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5970e5532afcd26b4579218925eb3ff1

Files

5970e5532afcd26b4579218925eb3ff1
.exe windows:4 windows x86 arch:x86

dcbf7aa95878d295b75dd7484be9a4e4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualUnlock
GetTimeFormatW
lstrcpyA
WriteConsoleA
FatalAppExitW
GetTempFileNameW
InterlockedIncrement

user32

PostThreadMessageA
ChangeDisplaySettingsA
EnableWindow
SwitchDesktop
CallWindowProcA
SetWindowRgn

gdi32

CreateDCA
PlayEnhMetaFile
UnrealizeObject
ModifyWorldTransform
SetWorldTransform
EnumMetaFile
GetCurrentPositionEx

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 672B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 172KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data0
Size: 60KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE